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(57)Abstract: 

PROBLEM TO BE SOLVED: To facilitate the prevention of eavesdropping and 
impersonation by a malicious user and the analysis and restoration of an address 
setting error. 

SOLUTION: An LAN switch 11 constitutes the communication network of a virtual 
LANCVLAN) 1 and the VLAN 2, etc., by arbitrarily connecting plural personal 
computers(PCs) 31-34 as network terminals to respective plural ports 21-25. In this 



case, it is provided with a communication processing means 12 for transmitting and 
receiving packets with the respective ports 21-25, a relay processing means 13 for 
relaying the packets with the respective ports 21*25 based on a host table 14 updated by 
learning the change of the correspondence relation of the respective ports and the 
address information of the connected PC and an authentication processing means 15 for 
performing user authentication to the PC of a transmission origin by referring to an 
authentication table 16 and permitting the rewrite of the host table 14 and the relay of 
the packet only in the case of a true user at the time of the updating of the host table 14 
of a packet relay trigger. 
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CLAIMS 



[Claim(s)] 

[Claim 1] Two or more input/output port to which a network terminal or network 
repeating installation is connected. The control table which matches and stores either 
[ at least ] the network logical address given to each said input/output port and said 
network terminal, or network repeating installation or a network physical address, 
While delivering and receiving communication link information between said network 
terminal connected to each of two or more of said input/output port based on said 
control table, or network repeating installation By learning change of the 
correspondence relation between either [ at least ] said network logical address 
included in said communication link information or a network physical address and said 
input/output port, and updating said control table It is the management method of the 
communication network system using information repeating installation including the 
junction processing means which enables dynamic modification of said network 
terminal over said input/output port, or the connection condition of network repeating 
installation. Either [ at least ] said network logical address corresponding to each 
network terminal, or a network physical address. The 1st step which sets up the 
authentication table on which the user name and password of the network terminal 
concerned were stored by matching. When transfer of said communication link 
information accompanied by renewal of said control table occurs, in advance of 
transfer of said communication link information, and renewal of said control table, the 
transmitting origin of said communication link information and. one [ at least ] user of a 
transmission place are received. User authentication which requires the input of said 
user name and a password, and collates it with said user name and password in the 
user name and password which were entered, and said authentication table is 
performed. The 2nd step which discards said communication link information while 
inhibiting renewal of said control table, when renewal of said control table and transfer 
of said communication link information are performed only when it succeeds in said 
user authentication, and said user authentication goes wrong, The management 



method of the communication network system characterized by performing. 
[Claim 2] In the management method of a communication network system according 
to claim 1 at said 1st step As opposed to either [ at least ] said network logical 
address or a network physical address One [ at least ] contact mail address of said 
user and the manager of a communication network system is also matched and set up. 
At said 2nd step While said user name inputted by said user of the transmitting origin 
of said communication link information or a transmission place in said user 
authentication is included The processing which sends out the message which notifies 
that the updating demand of said control table occurred to said user of said network 
logical address which creates and corresponds, or a network physical address, and 
one [ at least ] contact mail address of a manager, When said user authentication in 
said 2nd step goes wrong, while inhibiting renewal of said control table, said 
communication link information is discarded. When said user authentication in the 
separation of said input/output port which furthermore received the communication 
link information concerned and the processing which discards all the communication 
link information received from the input/output port concerned, and said 2nd step 
goes wrong, While inhibiting renewal of said control table, said communication link 
information is discarded. To the user of said all network terminals belonging to the still 
more nearly same virtual LAN (local area network) as said network logical address of 
the transmitting origin of this communication link information, or a network physical 
address The setting mistake of said network logical address or a network physical 
address, The processing which creates and sends the message which warns of the 
malicious user performing tapping and the communication link of spoofing using the 
address of other network terminals, The processing which performs said user 
authentication regardless of the existence of updating demand generating of said 
control table to the user of said network logical address registered into said control 
table periodically or irregularly, or a network physical address, ** — the management 
method of the communication network system characterized by performing one 
processing even if few. 

[Claim 3] Two or more input/output port to which a network terminal or network 
repeating installation is connected, The control table which matches and stores either 
[ at least ] the network logical address given to each said input/output port and said 
network terminal, or network repeating installation or a network physical address, 
While delivering and receiving communication link information between said network 
terminal connected to each of two or more of said input/output port based on said 
control table, or network repeating installation By learning change of the 



correspondence relation between either [ at least ] said network logical address 
included in said communication link information or a network physical address and said 
input/output port, and updating said control table It is information repeating 
installation including the junction processing means which enables dynamic 
modification of said network terminal over said input/output port, or the connection 
condition of network repeating installation. Either [ at least ] said network logical 
address corresponding to each network terminal, or a network physical address. The 
user name of the network terminal concerned and a password, and the authentication 
table on which one [ at least ] contact mail address of said user and the manager of a 
communication network system was stored by matching, When transfer of said 
communication link information accompanied by renewal of said control table occurs, 
in advance of transfer of said communication link information, and renewal of said 
control table, the transmitting origin of said communication link information and said 
one [ at least ] user of a transmission place are received. While performing user 
authentication which requires the input of a user name and a password and collates it 
with said user name and password in the user name and password which were entered, 
and said authentication table While transmitting the message which notifies that said 
updating demand of the user name obtained by said user authentication to said one 
[ at least ] contact mail address of the transmitting origin of said communication link 
information and said manager and said control table occurred It is the information 
repeating installation characterized by having the control logic which performs 
actuation which discards said communication link information while inhibiting renewal 
of said control table, when renewal of said control table and transfer of said 
communication link information are performed only when it succeeds in said user 
authentication, and said user authentication goes wrong. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] Especially this invention is applied to the management method 
of the Internet work-piece equipment called a LAN (LAN: Local Area Network) switch 
(Layer2 a switch, Layer3 switch, etc.) and the communication network system (LAN 
switch network system) constituted from a LAN switch etc. about the management 
technique and information junction technique of a communication network system, 
and relates to an effective technique. 
[0002] 

[Description of the Prior Art] VLAN (VLAN: Virtual LAN) is in the description 
technique which a LAN switch has. VLAN is a technique which enables construction 
of LAN, without being dependent on the physical port of Internet work-piece 
equipment, and is known by the difference in the format under the name of the port 
base VLAN, the MAC (MAC: Media Access Control) address base VLAN, the Layer3 
protocol base VLAN, IP (IP: Internet Protocol) subnet base VLAN, etc. 
[0003] With the reference technique of this invention, if the packet from PC (PC: 
Personal Computer)231 to PC233 is received, the LAN switch 210 equipped with two 
or more ports 221-225 in the communication network system of IP subnet base VLAN 
shown, for example in drawing 7 will learn the starting point MAC Address of a packet, 
a terminal point MAC Address, and a starting point IP address, and will create a host 
table 220. Next, when an applicable entry is in a key with reference to a host table 220 
about a terminal point IP address, a packet is outputted to an applicable port. When 
there is no applicable entry, it opts for the NeXT hop with reference to routing table 
(with no illustration), and an ARP (ARP: Address Resolution Protocol) table (with no 
illustration), and the entry of the corresponding host table 220 is created newly, and a 
packet is outputted to an applicable port. The LAN switch 210 is carried out in this 
way, and relays the packet to PC233 from PC231. 

[0004] Furthermore, with the LAN switch 210, the entry of a host table 220 is 
discarded periodically, and since the entry of a host table 220 is always updated by 
newly learning from a packet, even when PC moves, a packet can be correctly relayed 



to the port of a migration place. That is, PC can resume automatically the same 

communication link as migration before, even when it moves. 

[0005] 

[Problem(s) to be Solved by the Invention] However, there is the next technical 
technical problem in the above-mentioned reference technique. 

[0006] The 1 st technical technical problem is defenseless to the setting mistake of an 
IP address etc. For example, PC232 presupposes that the IP address of PC231 has 
been accidentally connected with a setup and a port 222. In this case, with the LAN 
switch 210, it will judge that PC231 moved to the port 222 from the port 221, and a 
host table 220 will be rewritten such. Consequently, the poor communication link of it 
becoming impossible to communicate etc. generates PC231 which is using the IP 
address correctly. Moreover, when there are many PCs connected to a network, 
analysis and recovery of this poor communication link take a great effort. 
[0007] The 2nd technical technical problem is allowing tapping and spoofing by the 
malicious user. For example, suppose that PC235 connected the IP address of PC231 
to the setup and the port 225. In this case, with the LAN switch 210, it will judge that 
PC231 moved to the port 225 from the port 221 , and a host table 220 will be rewritten 
such. Consequently, the commo data addressed to PC231 will be able to be received 
and it will be able to intercept and PC235 will turn into PC231, and will be able to 
clear up and communicate. 

[0008] The purpose of this invention is to offer the management technique and 
information junction technique of the communication network system in which 
prevention of the poor communication link by the setting mistake of a logical or 
physical network address etc., and the cause analysis of a poor communication link 
and speeding up of recovery operation are possible. 

[0009] Other purposes of this invention are to offer the management technique and 
information junction technique of the communication network system which can raise 
the security of a communication network system by preventing tapping and spoofing 
by the malicious user. 
[0010] 

[Means for Solving the Problem] This invention connects a user terminal and other 
repeating installation to two or more input/output port with which information 
repeating installation, such as a LAN switch, was equipped, and is built, and change of 
connection conditions, such as a user terminal to input/output port, is learned. By 
updating the control table which manages the correspondence relation between 
input/output port and a network address In the management method of the 



communication network which can change dynamically the connection condition over 
the input/output port of each user terminal When the updating demand of a control 
table ignited by transfer of communication link information occurs between each user 
terminal (i.e., between two or more input/output port), Only when user authentication 
is performed to the user terminal of the transmitting origin of the communication link 
information concerned and it is checked that he is the user of Shinsei, the 
communication link information based on updating and it of a control table is made to 
deliver and receive. 

[0011] Moreover, each user terminal and a system administrator's contact mail 
address are registered into some authentication tables on which the network address 
used for user authentication, a user name, a password, etc. were stored, and the 
message which described that the updating demand concerned occurred at the time 
of generating of an updating demand of a control table is sent to a user terminal, a 
system administrator, etc. of the transmitting origin of communication link information 
by e-mail. Under the present circumstances, regardless of the existence of a success 
of user authentication, the user name obtained in the user authentication concerned 
is stored in the message concerned. 

[0012] More specifically, this invention has the following descriptions. 
[0013] In the communication network system which constitutes this invention from 
the 1st viewpoint with a LAN switch It is the management method of the LAN switch 
network system which can prevent a poor communication link, and tapping and 
spoofing by the malicious user by the setting mistake of an IP address etc. For 
example, it sets to the communication network system of IP subnet base VLAN shown 
in drawing 1 . (a) Beforehand PCs 31-34 on the LAN switch 11 An IP address and its 
user name, Register a password and a contact mail address and the manager of the (b) 
LAN switch 1 1 registers a contact mail address into the LAN switch 1 1 beforehand 
similarly, (c) If a LAN switch creates the authentication table 16 which registers the 
information of the manager of said PCs 31-34 and said LAN switch 1 1 and the LAN 
switch 1 1 receives the packet from PC31 to PC33 to the (d) pan Learn the starting 
point MAC Address of a packet, a terminal point MAC Address, and a starting point IP 
address, and a host table 14 ( drawing 2 ) is created. When rewriting to different 
information from the case where there is no entry which corresponds to said starting 
point IP address in said host table 14 at this time, and it creates newly, or an 
applicable entry While being the receive port of this packet and requiring a user name 
and a password of PC of the starting point IP address of this packet It waits to return 
a user name and a password. The message which tells the purport which the rewriting 



demand of a host table 14 generated to the contact mail address applicable to said 
starting point IP address in said authentication table 16 (the user name returned from 
PC into this message is put in as information.) When delivery, and the user name and 
password which are registered into the authentication table 16 further beforehand are 
not obtained (it contains also when a response is not returned in fixed time amount) 
While stopping entry rewriting of a host table 14, when the user name and password 
which discard this packet and are beforehand registered into the authentication table 
16 are obtained When an applicable entry is in a key with reference to a host table 14, 
a terminal point IP address When a packet is outputted to an applicable port and there 
is no applicable entry Opt for the NeXT hop with reference to routing table (with no 
illustration), and an ARP table (with no illustration), and the entry of the corresponding 
host table 14 is created newly. The management method of the LAN switch network 
system characterized by outputting a packet to an applicable port is offered. 
[0014] Since it can ask for the input of the user name and the password which were 
beforehand registered from the LAN switch 1 1 in that case, it becomes impossible to 
intercept it except PC31 which know the password [ PC31 ], or to become and clear 
up it in the management method of the LAN switch network system by the 1st 
viewpoint of the above, although PC31 can resume automatically the same 
communication link as migration before even when it moves to other ports from a port 
21. Moreover, since the message (put into the user name of PC32 in this message) 
which tells the manager of PC31 and the LAN switch 1 1 that is sent even when PC32 
has connected the IP address of PC31 to a setup and a port 22 accidentally, the user 
of PC31 and the manager of the LAN switch 1 1 can carve the cause of a failure easily 
(analysis), and quick recovery becomes possible. 

[0015] A communications processing means 12 by which this invention transmits and 
receives a packet among (a) each ports 21-25 in the 2nd viewpoint, (b) The starting 
point MAC Address of the packet passed from said communications processing 
means 12, Learn a terminal point MAC Address and a starting point IP address, and a 
host table 14 ( drawing 2 ) is created. When rewriting to different information from the 
case where there is no entry which corresponds to said starting point IP address in 
said host table 14 at this time, and it creates newly, or an applicable entry When it 
rewrites, and it asks the authentication processing means 15 whether it is good (new 
creation is also included), consequently the notice of the ban on rewriting is received 
While stopping entry rewriting of said host table 14, when this packet is discarded and 
the notice of rewriting authorization is received When an applicable entry is in a key 
with reference to said host table 14, a terminal point IP address When the packet 



output to an applicable port is directed for said communications processing means 12 
and there is no applicable entry Opt for the NeXT hop with reference to routing table 
(with no illustration), and an ARP table (with no illustration), and the entry applicable 
to said host table 14 is created newly. A junction processing means 13 to direct the 
packet output to an applicable port for said communications processing means 12, (c) 
If the IP address of each PCs 31-34 beforehand inputted through the administration 
terminal (with no illustration) etc., a user name, a password, a contact mail address, 
etc. are registered, the authentication table 16 is created and it is directed from said 
junction processing means 13 While creating the message which requires the input of 
a user name and a password of PC of the directed IP address and directing sending 
out in the receive port of this packet for said communications processing means 12 It 
waits to return a user name and a password. The message which tells the purport 
which the entry rewriting demand of a host table 14 generated to the contact mail 
address applicable to said IP address in said authentication table 16 (the user name 
returned from PC into this message is made into information) putting in — it creating 
and sending out being directed for said communications processing means 12, and, 
when the user name and password which are registered into the authentication table 
16 further beforehand are not obtained (it contains also when a response is not 
returned in fixed time amount) When the user name and password which notify the ban 
on rewriting of the entry of said host table 14 to said junction processing means 13, 
and are beforehand registered into the authentication table 16 are obtained The LAN 
switch 1 1 characterized by providing an authentication processing means 15 to notify 
rewriting authorization of the entry of said host table 14 to said junction processing 
means 13 is offered. 

[0016] According to the LAN switch 11 by the 2nd viewpoint of the above, the 
management method of the LAN switch network system of the 1st viewpoint of the 
above can be suitably enforced now. 

[0017] In the 3rd viewpoint, this invention is set on the LAN switch 11 of the 
above-mentioned configuration. Said authentication processing means 15 The 
message which requires the input of a user name and a password of PC of the IP 
address of the entry of the host table 14 directed from said junction processing 
means 13 is created. Sending out in the receive port of this packet is directed for said 
communications processing means 12. When the user name and password which are 
beforehand registered into the authentication table 1 6 are not obtained (it contains 
also when a response is not returned in fixed time amount) It not only notifies the ban 
on rewriting of the entry of said host table 14 to said junction processing means 13, 



but The LAN switch 1 1 characterized by directing abandonment of all the packets that 
receive from the separation of a port which received this packet, or this port for said 
junction processing means 13 is offered. 

[0018] According to the LAN switch 1 1 by the 3rd viewpoint of the above, the user of 
the setting mistake of an IP address etc. or malice can reduce the traffic load of the 
repeat of the input request of the user name by tapping or the thing which it is going 
to become and is going to communicate by clearing up, and a password using the 
address of other PCs. 

[0019] In the 4th viewpoint, this invention is set on the LAN switch 11 of the 
above-mentioned configuration. Said authentication processing means 15 The 
message which requires the input of a user name and a password of PC of the IP 
address of the entry of the host table 14 directed from said junction processing 
means 13 is created. Sending out in the receive port of this packet is directed for said 
communications processing means 12. When the user name and password which are 
beforehand registered into the authentication table 1 6 are not obtained (it contains 
also when a response is not returned in fixed time amount) It not only notifies the ban 
on rewriting of the entry of said host table 14 to said junction processing means 13, 
but To the user of all PCs belonging to the same VLAN as the starting point IP 
address of this packet The message which warns of the user of the setting mistake of 
an IP address etc. or malice performing tapping and the communication link of 
spoofing using the address of other PCs is created, and the LAN switch 11 
characterized by making it direct and send out to said communications processing 
means 12 is offered. 

[0020] As another side face of the 4th viewpoint, moreover, this invention In the LAN 
switch 1 1 of the above-mentioned configuration said authentication processing means 
1 5 The message which requires the input of a user name and a password of PC of the 
IP address of the entry of the host table 14 directed from said junction processing 
means 13 is created. The output to the receive port of this packet is directed for said 
communications processing means 12. Only when the user name and password which 
are beforehand registered into the authentication table 16 are not obtained (it 
contains also when a response is not returned in fixed time amount) The message 
which tells the purport which rewriting failure of a host table 14 generated to the 
contact mail address applicable to said starting point IP address in said authentication 
table 16 is created, and the LAN switch 1 1 characterized by making it direct and send 
out to said communications processing means 12 is offered. 

[0021] According to the LAN switch 11 of the former by the 4th viewpoint of the 



above, warning can be emitted in advance also to the user to whom not only a person 
concerned but the thing same after that may happen that the user of the setting 
mistake of an IP address etc. or malice is going to perform tapping and the 
communication link of spoofing using the address of other PCs. 

[0022] Moreover, while according to the LAN switch 1 1 of the latter by the 4th 
viewpoint of the above losing the mail sent to a Shinsei (when the Shinsei user is 
communicating in the normal use range) user at the time of a rewriting success and 
reducing traffic volume, only when rewriting goes wrong, carving (analysis) and 
recovery of the quicker cause of a failure become possible by telling that. 
[0023] In the 5th viewpoint, this invention offers the LAN switch 1 1 characterized by 
said authentication processing means 15 performing an inquiry of a user name and a 
password periodically not about the new creation time of the entry of a host table 14, 
or the time of rewriting but about each entry in the LAN switch 1 1 of the 
above-mentioned configuration. 

[0024] According to the LAN switch 1 1 by the 5th viewpoint of the above, it can be 
confirmed whether have made the setting mistake of an IP address etc., or the 
malicious user omits tapping and the communication link of spoofing also with PC 
which does not send itself only by receiving a packet using the address of other PCs. 
[0025] Moreover, according to the LAN switch by the 5th viewpoint of the above, it 
can be confirmed whether the port connection mistake the IP address setting mistake, 
etc. and the malicious user omit tapping and the communication link of spoofing by 
setting the Shinsei user's IP address as the port which PC of a user [ Shinsei till 
then ] had connected, and connecting PC. 

[0026] In the 6th viewpoint, this invention is set on the LAN switch 1 1 of the 
above-mentioned configuration. Said junction processing means 13 When the new 
creation time of the entry of a host table 14 and rewriting applicable to the starting 
point IP address of a receive packet occur It not only asks said authentication 
processing means 15 whether I may rewrite it, but When the new creation time of the 
entry of a host table 14 and rewriting which correspond similarly occur also about the 
terminal point IP address of a receive packet, the LAN switch 1 1 characterized by 
asking said authentication processing means 15 whether I may rewrite it is offered. 
[0027] According to the LAN switch 1 1 by the 6th viewpoint of the above, it can be 
confirmed whether have made the setting mistake of an IP address etc., or the 
malicious user omits tapping and the communication link of spoofing also with PC 
which does not send itself only by receiving a packet using the address of other PCs. 
[0028] Moreover, according to the LAN switch by the 6th viewpoint of the above, it 



can be confirmed whether the port connection mistake the IP address setting mistake, 
etc. and the malicious user omit tapping and the communication link of spoofing by 
setting the Shinsei user's IP address as the port which PC of a user [ Shinsei till 
then ] had connected, and connecting PC. 
[0029] 

[Embodiment of the Invention] Hereafter, the gestalt of operation of this invention is 
explained to a detail, referring to a drawing. In addition, thereby, this invention is not 
limited. 

[0030] Drawing 1 is the conceptual diagram showing the configuration of the LAN 
switch which enforces the management method of the communication network 
system which is the 1st operation gestalt of this invention, and an example of IP 
subnet base VLAN where the LAN switch concerned is applied. Moreover, the 
conceptual diagram showing an example of the various control information for which 
drawing 2 and drawing 3 are used with the LAN switch of the gestalt of this operation, 
drawing 4 , drawing 5 , and drawing 6 are flow charts which show the management 
method of the communication network system of the gestalt of this operation, and an 
example of an operation of a LAN switch. 

[0031] By relaying the packet between each port 21-25 from the packet 
(communication link information) which received based on a host table 14 like drawing 
2 learned and created, the LAN switch 1 1 of the gestalt of this operation realizes the 
communication link between PCs 31-34, and consists of a communications processing 
means 12, a junction processing means 13, and an authentication processing means 
15. 

[0032] Said communications processing means 12 is a means which transmits and 
receives a packet among each ports 21-25, for example, consists of electron devices, 
such as CPU, ASIC, RAM, and ROM. 

[0033] Said junction processing means 13 is a means to relay the packet between 
each port 21-25 based on a host table 14, for example, consists of electron devices, 
such as CPU, ASIC, RAM, and ROM. 

[0034] Information which shows networks, such as VLAN to which starting point IP 
address14a, starting point MAC Address14b, terminal point MAC Address14c, 14d of 
port numbers, and the port concerned belong, such as imputed network 14e, is 
matched, and the host table 14 is stored so that it may be illustrated by drawing 2 . 
[0035] Said authentication processing means 15 is a means to perform the improper 
judgment which can rewrite a host table 14, for example, consists of electron devices, 
such as CPU, ASIC, RAM, and ROM. The information used as the radical of a 



rewritable improper judgment is beforehand registered and held on the authentication 
table 16 (after-mentioned). 

[0036] Drawing 3 is the block diagram of the authentication table 16 used with the 
LAN switch 11 of the gestalt of this operation. IP address 16a of PCs 31-34, user 
name 16b which is using the PC, password 16c, and contact mail address 16d are 
beforehand registered into the authentication table 16 through the console terminal 
(with no illustration) etc. 

[0037] First, the actuation in the case of communicating from PC31 to PC33 is 
explained. 

[0038] Drawing 4 is a flow chart which shows an example of actuation of the LAN 
switch 11 of the gestalt of this operation in the case of communicating from PC31 to 
PC33, and the management method of a communication network system. 
[0039] In addition, each PCs 31-34 shall register an IP address, and the user name, a 
password and a contact mail address into the LAN switch 1 1 beforehand, the manager 
of the LAN switch 1 1 shall register a contact mail address into the LAN switch 1 1 
beforehand similarly, and the LAN switch 1 1 shall have created the authentication 
table 16 which registers the information of the manager of said PCs 31-34 and said 
LAN switch 1 1 . 

[0040] PC31 creates the packet addressed to PC33, and sends it out to a port 21 
(step 101). 

[0041] The communications processing means 12 of the LAN switch 11 carries out 
reception of said packet from a port 21, and passes it to the junction processing 
means 13 (step 102). 

[0042] The junction processing means 13 learns the starting point MAC Address of a 
receive packet, a terminal point MAC Address, and a starting point IP address, and 
creates a host table 14. When rewriting to different information from the case where 
there is no entry which corresponds to said starting point IP address in a host table 14 
at this time, and it creates newly, or an applicable entry, this entry is rewritten and it 
is asked to the authentication processing means 15 whether it is good (new creation is 
also included) (step 103). When there is no need (new creation is also included) of 
rewriting, it progresses to step 110. This case is a case of 1 packet eye of 
communication link initiation, and in order to newly create, it shall progress to degree 
step. It progresses to step 1 1 0 in the case after 2 packet eye. 

[0043] After creating the prompt (it is called Message A.) of a user name and a 
password and directing sending out for the communications processing means 12, it 
waits for the authentication processing means 15 fixed time (step 104). 



[0044] The communications processing means 12 sends out Message A to this 
addressing to an IP address of the receive port (port 21 in this case) of this packet 
(step 105). 

[0045] If the communications processing means 12 receives the response message of 
Message A, i.e., the incoming message of a user name and a password, (it is called 
Message B.) from PC31, reception of it will be carried out and it will be passed to the 
authentication processing means 15 (step 106). 

[0046] The authentication processing means 15 is a message (it is called Message C.) 
which tells the purport which the rewriting demand of a host table 14 generated in 
contact mail address 16d registered into the applicable entry of the authentication 
table 16 after checking that compare IP address! 6a currently written to be the IP 
address stored in Message B, a user name, and a password to the authentication table 
16, user name 16b, and password 16c t and it is in agreement, into Message C, the user 
name stored in Message B is put in as information, creating — the communications 
processing means 1 2 — sending out — directing (step 1 07) — the purport of rewriting 
authorization is notified to the junction processing means 13 (step 109). 
[0047] The communications processing means 12 sends out Message C to this 
addressing to a mail address (step 108). 

[0048] On the other hand, if the notice of the purport of rewriting authorization is 
received from the authentication processing means 15, the junction processing means 
13 When the applicable entry of a host table 14 is rewritten, a terminal point IP 
address is referred to next, a host table 14 is referred to to a key and there is an 
applicable entry When the packet output to an applicable port is directed for the 
communications processing means 12 and there is no applicable entry It opts for the 
NeXT hop with reference to routing table (with no illustration), and an ARP table (with 
no illustration), and the entry of the corresponding host table 14 is created newly, and 
the packet output to an applicable port is directed for the communications processing 
means 12 (step 1 10). 

[0049] The communications processing means 12 sends out this packet to an 
applicable port (step 111). 

[0050] By the above, the communication link to PC33 from PC31 can be started. 
[0051] Next, after PC31 moves to a port 25 from a port 21, the actuation in the case 
of communicating to PC33 is explained. 

[0052] Although the point as for which the entry applicable to the IP address of PC31 
is already made to the host table 14 differs from the above-mentioned case, actuation 
carries out the same motion as the flow chart shown in drawing 4 . 



[0053] PC31 creates the packet addressed to PC33, and sends it out to a port 21 
(step 101). 

[0054] The communications processing means 12 of the LAN switch 11 carries out 
reception of said packet, and passes it to the junction processing means 13 (step 102). 
[0055] The junction processing means 13 learns the starting point MAC Address of a 
receive packet, a terminal point MAC Address, and a starting point IP address, and 
creates a host table 14. When rewriting to different information from the case where 
there is no entry which corresponds to said starting point IP address in a host table 14 
at this time, and it creates newly, or an applicable entry, this entry is rewritten and it 
is asked to the authentication processing means 15 whether it is good (new creation is 
also included) (step 103). When there is no need (new creation is also included) of 
rewriting, it progresses to step 1 10. This case is a case of 1 packet eye of resumption 
of a communication link after migration, and it shall progress to degree step in order to 
rewrite the information on an entry. It progresses to step 110 in the case after 2 
packet eye. 

[0056] After creating the prompt (it is called Message A.) of a user name and a 

password and directing sending out for the communications processing means 12, it 

waits for the authentication processing means 15 fixed time (step 104). 

[0057] The communications processing means 12 sends out Message A to this 

addressing to an IP address of the receive port of this packet (step 105). 

[0058] If the communications processing means 12 receives the response message of 

Message A, i.e., the incoming message of a user name and a password, (it is called 

Message B.), reception of it will be carried out and it will be passed to the 

authentication processing means 15 (step 106). 

[0059] The authentication processing means 1 5 is a message (it is called Message C.) 
which tells the purport which the rewriting demand of a host table 14 generated in 
contact mail address 16d registered into the applicable entry of the authentication 
table 16 after checking that compare IP address16a currently written to be the IP 
address stored in Message B, a user name, and a password to the authentication table 
16, user name 16b, and password 16c, and it is in agreement, into Message C, the user 
name stored in Message B is put in as information, creating — the communications 
processing means 1 2 — sending out — directing (step 1 07) — the purport of rewriting 
authorization is notified to the junction processing means 13 (step 109). 
[0060] The communications processing means 12 sends out Message C to this 
addressing to a mail address (step 108). 

[0061] On the other hand, if the notice of the purport of rewriting authorization is 



received from the authentication processing means 15, the junction processing means 
13 When the applicable entry of a host table 14 is rewritten, a terminal point IP 
address is referred to next, a host table 14 is referred to to a key and there is an 
applicable entry When the packet output to an applicable port is directed for the 
communications processing means 12 and there is no applicable entry It opts for the 
NeXT hop with reference to routing table (with no illustration), and an ARP table (with 
no illustration), and the entry of the corresponding host table 14 is created newly, and 
the packet output to an applicable port is directed for the communications processing 
means 12 (step 1 10). 

[0062] The communications processing means 12 sends out this packet to an 
applicable port (port 25 in this case) (step 111). 

[0063] By the above, PC31 can resume the communication link with PC33 also even 
for after migration from a port 21 automatically to a port 25. 

[0064] Next, PC32 connects the IP address of PC31 to a setup and a port 22 
accidentally, and the actuation at the time of starting the communication link with 
PC33 is explained. 

[0065] Drawing 5 is a flow chart which shows an example of actuation of the LAN 
switch 1 1 of the gestalt of this operation at the time of PC32 connecting the IP 
address of PC31 to a setup and a port 22 accidentally, and starting the 
communication link with PC33, and the management method of a communication 
network system. 

[0066] PC32 creates the packet addressed to PC33, and sends it out to a port 21 
(step 121). 

[0067] The communications processing means 12 of the LAN switch 11 carries out 
reception of said packet, and passes it to the junction processing means 13 (step 102). 
[0068] The junction processing means 13 learns the starting point MAC Address of a 
receive packet, a terminal point MAC Address, and a starting point IP address, and 
creates a host table 14. When rewriting to different information from the case where 
there is no entry which corresponds to said starting point IP address in a host table 14 
at this time, and it creates newly, or an applicable entry, this entry is rewritten and it 
is asked to the authentication processing means 1 5 whether it is good (new creation is 
also included) (step 103). When there is no need (new creation is also included) of 
rewriting, it progresses to step 110. This case is a case of 1 packet eye which PC32 
connected the IP address of PC31 to the setup and the port 22 accidentally, and 
started the communication link with PC33, and it shall progress to degree step in 
order to rewrite the information on an entry. In addition, in this case, since rewriting of 



the information on an entry goes wrong as a result, the case after 2 packet eye will 
also progress to degree step. 

[0069] After creating the prompt (it is called Message A.) of a user name and a 
password and directing sending out for the communications processing means 12, it 
waits for the authentication processing means 15 fixed time (step 104). 
[0070] The communications processing means 12 sends out Message A to this 
addressing to an IP address of the receive port (port 22 in this case) of this packet 
(step 105). 

[0071] If the communications processing means 12 receives the response message of 
Message A, i.e., the incoming message of a user name and a password, (it is called 
Message B.), reception of it will be carried out and it will be passed to the 
authentication processing means 15 (step 106). 

[0072] The authentication processing means 1 5 is a message (it is called Message C.) 
which tells the purport which the rewriting demand of a host table 14 generated in 
contact mail address 16d registered into the applicable entry of the authentication 
table 16 after checking that compare IP address16a currently written to be the IP 
address stored in Message B, a user name, and a password to the authentication table 
16, user name 16b, and password 16c, and it is not in agreement, into Message C, the 
user name stored in Message B is put in as information, creating — the 
communications processing means 12 — sending out — directing (step 108) — the 
purport of the ban on rewriting is notified to the junction processing means 13 (step 
122). 

[0073] The communications processing means 12 sends out Message C to this 
addressing to a mail address (step 108 (Message C is sent to PC31 which is the owner 
of Shinsei of the IP address which apologized for Message C in PC32, and was set up 
in this case.)). 

[0074] On the other hand, if the junction processing means 1 3 is rewritten from the 
authentication processing means 15 and the notice of the purport of prohibition is 
received, it will stop rewriting of the applicable entry of a host table 14, and will 
discard this packet (step 123). 

[0075] Since the message (put into the user name of PC32 which performed incorrect 
setting actuation into this message) which tells PC31 of Shinsei and the manager of 
the LAN switch 1 1 that is sent even when PC32 has connected the IP address of 
PC31 to a setup and a port 22 accidentally by the above, the user of PC31 and the 
manager of the LAN switch 1 1 can carve the cause of a failure easily, and the quick 
recovery of them becomes possible. 



[0076] Next a malicious user's PC35 connects the IP address of PC31 to a setup and 
a port 25, and the actuation at the time of starting the communication link with PC33 
is explained. 

[0077] Drawing 6 is a flow chart which shows an example of actuation of the LAN 
switch 1 1 of the gestalt of this operation at the time of a malicious users PC35 
connecting the IP address of PC31 to a setup and a port 25, and starting the 
communication link with PC33, and the management method of a communication 
network system. 

[0078] PC35 creates the packet addressed to PC33, and sends it out to a port 25 
(step 131). 

[0079] The communications processing means 12 of the LAN switch 11 carries out 
reception of said packet, and passes it to the junction processing means 13 (step 102). 
[0080] The junction processing means 13 learns the starting point MAC Address of a 
receive packet, a terminal point MAC Address, and a starting point IP address, and 
creates a host table 14. When rewriting to different information from the case where 
there is no entry which corresponds to said starting point IP address in a host table 14 
at this time, and it creates newly, or an applicable entry, this entry is rewritten and it 
is asked to the authentication processing means 15 whether it is good (new creation is 
also included) (step 103). When there is no need (new creation is also included) of 
rewriting, it progresses to step 110. This case is a case of 1 packet eye which a 
malicious user's PC35 connected the IP address of PC31 to the setup and the port 25, 
and started the communication link with PC33 t and it shall progress to degree step in 
order to rewrite the information on an entry. In addition, in this case, since rewriting of 
the information on an entry goes wrong as a result, the case after 2 packet eye will 
also progress to degree step. 

[0081] After creating the prompt (it is called Message A.) of a user name and a 
password and directing sending out for the communications processing means 12, it 
waits for the authentication processing means 15 fixed time (step 104). 
[0082] The communications processing means 12 sends out Message A to this 
addressing to an IP address of the receive port (port 25 in this case) of this packet 
(step 105). 

[0083] If the communications processing means 12 receives the response message of 
Message A, i.e., the incoming message of a user name and a password, (it is called 
Message B.) t reception of it will be carried out and it will be passed to the 
authentication processing means 15 (step 106). 

[0084] The authentication processing means 15 is a message (it is called Message C.) 



which tells the purport which the rewriting demand of a host table 14 generated in 
contact mail address 1 6d registered into the applicable entry of the authentication 
table 16 after checking that compare IP address 16a currently written to be the IP 
address stored in Message B, a user name, and a password to the authentication table 
16, user name 16b, and password 16c, and it is not in agreement. Into Message C, the 
user name stored in Message B is put in as information, when Message B is not sent in 
the case where it is not put into a user name by Message B, or fixed time amount, the 
information which tells that is put in. creating — the communications processing 
means 12 — sending out — directing (step 122) — the purport of the ban on rewriting 
is notified to the junction processing means 13 (step 109). 

[0085] The communications processing means 12 sends out Message C to this 
addressing to a mail address (step 108 (Message C reaches PC31 which is the user of 
Shinsei instead of PC35 of the transmitting origin of a packet in this case)). 
[0086] On the other hand, if the junction processing means 13 is rewritten from the 
authentication processing means 15 and the notice of the purport of prohibition is 
received, it will stop rewriting of the applicable entry of a host table 14, and will 
discard this packet (step 123). 

[0087] Moreover, the manager of a system who received Message C can grasp the 
situation based on the information stored in Message C, and can take measures. 
[0088] It can prevent not performing rewriting of a host table 14, since it can ask for 
the input of the user name to which PC31 registered PC35 into the LAN switch 11 
beforehand even if a malicious user's PC35 set up the IP address of PC31 by the 
above and it connected with the port 25, and a password and cannot respond 
correctly to it, therefore PC's35 intercepting [ PC31 ], or becoming, and clearing up. 
[0089] Next, an example other than the 1st example is explained. 
[0090] In the 1st example, it sets on the LAN switch 11. The authentication 
processing means 15 The message A which requires the input of a user name and a 
password of PC of the IP address of the entry of the host table 14 directed from the 
junction processing means 13 is created. When the user name and password which 
direct sending out in the receive port of this packet for the communications 
processing means 12, and are beforehand registered into the authentication table 16 
are not obtained (it contains also when a response is not returned in fixed time 
amount) Although the ban on rewriting of the entry of said host table 14 is notified to 
said junction processing means 13, you may make it direct abandonment of all the 
packets that receive from the separation (lock out) of a port which received this 
packet further in addition to it, or this port for said junction processing means 13. By 



the above, the user of the setting mistake of an IP address etc. or malice can reduce 
the traffic load of the repeat of the input request of the user name by tapping or the 
thing which it is going to become and is going to communicate by clearing up, and a 
password using the address of other PCs. 

[0091] In the 1st example, it sets on the LAN switch 1 1. Moreover, the authentication 
processing means 15 The message A which requires the input of a user name and a 
password of PC of the IP address of the entry of the host table 14 directed from the 
junction processing means 13 is created. When the user name and password which 
direct sending out in the receive port of this packet for the communications 
processing means 12, and are beforehand registered into the authentication table 16 
are not obtained (it contains also when a response is not returned in fixed time 
amount) Although the ban on rewriting of the entry of said host table 14 is notified to 
said junction processing means 13 To the user of all PCs that furthermore belong to 
the same VLAN as the starting point IP address of this packet in addition to it The 
user of the setting mistake of an IP address etc. or malice may create the message 
which warns of it performing tapping and the communication link of spoofing using the 
address of other PCs, and may make it direct and send out to said communications 
processing means 12. By the above, warning can be emitted in advance also to the 
user to whom not only a person concerned but the thing same after that may happen 
that the user of the setting mistake of an IP address etc. or malice is going to perform 
tapping and the communication link of spoofing using the address of other PCs. 
[0092] In the 1 st example, it sets on the LAN switch 1 1 . Moreover, the authentication 
processing means 15 Although new creation and rewriting of the entry of a host table 
14 occur, it rewrites from the junction processing means 13 (new creation is included), 
and ** is good, or the input of a user name and a password is demanded of PC of the 
IP address of this entry when an inquiry is received User authentication which 
requires the input of a user name and a password of PC of the IP address of each 
entry periodically, and checks whether you are the user of Shinsei may be performed. 
It can be confirmed whether have made the setting mistake of an IP address etc., or, 
by the above, the malicious user omits tapping and the communication link of spoofing 
also with PC which does not send itself only by receiving a packet using the address 
of other PCs. 

[0093] In the 1st example, it sets on the LAN switch 11. Moreover, the junction 
processing means 13 When the new creation time of the entry of a host table 14 and 
rewriting applicable to the starting point IP address of a receive packet occur It not 
only asks the authentication processing means 1 5 whether I may rewrite it, but When 



the new creation time of the entry of a host table 14 and rewriting which correspond 
similarly occur also about the terminal point IP address of a receive packet It asks 
said authentication processing means 15 whether I may rewrite it, and only when 
rewriting authorization gets down, it may be made to rewrite this entry. It can be 
confirmed whether have made the setting mistake of an IP address etc., or, by the 
above, the malicious user omits tapping and the communication link of spoofing also 
with PC which does not send itself only by receiving a packet using the address of 
other PCs. 

[0094] Moreover, although the 1st example explains using the example of IP subnet 
base VLAN, it is the same also at VLAN of other formats, such as the port base VLAN, 
the MAC Address base VLAN, and the Layer3 protocol base VLAN. 
[0095] As mentioned above, according to the management method and LAN switch of 
each operation of a communication network, tapping and spoofing by the malicious 
user can be prevented and the security of a communication network system improves. 
[ of this invention ] [ of a gestalt ] 

[0096] Moreover, by notifying the user of Shinsei, and the manager of a system of 
information, such as a user name obtained in user authentication, by e-mail, the cause 
of a failure by the setting mistake of an IP address etc. can be easily carved now, and 
quick recovery becomes possible. 

[0097] It will be as follows if the descriptions of this invention except having been 
indicated by the above-mentioned claim are enumerated. 

[0098] Namely, <1> It is the management method of the communication network 
system constituted from a LAN switch, (a) Beforehand each PC on a LAN switch An 
IP address and its user name, Register a password and a contact mail address and the 
manager of (b) LAN switch registers a contact mail address into a LAN switch 
beforehand similarly, (c) If a LAN switch creates the authentication table which 
registers the information of the manager of said PC and said LAN switch and a LAN 
switch receives the packet of the communication link between each PC to the (d) pan 
Learn the starting point MAC Address of this packet, a terminal point MAC Address, 
and a starting point IP address, and a host table is created. When rewriting to different 
information from the case where there is no entry which corresponds to said starting 
point IP address in said host table at this time, and it creates newly, or an applicable 
entry While being the receive port of this packet and requiring a user name and a 
password of PC of the starting point IP address of this packet Wait to return a user 
name and a password and the message which tells the purport which the rewriting 
demand of said host table generated is created. To the contact mail address which 



puts in as information the user name returned from PC into this message, and 
corresponds to said starting point IP address in said authentication table, delivery, 
When a response is not returned in the case where the user name and password which 
are registered into said authentication table further beforehand are not obtained, or 
fixed time amount While stopping entry rewriting of said host table, when the user 
name and password which discard this packet and are beforehand registered into said 
authentication table are obtained When an applicable entry is in a key with reference 
to said host table, a terminal point IP address It is the management method of the 
communication network system characterized by creating the entry of the 
corresponding host table newly and outputting a packet to an applicable port when a 
packet is outputted to an applicable port and there is no applicable entry. 
[0099] <2> In the management method of the communication network system of the 
aforementioned <1> publication a LAN switch When a response is not returned in the 
case where the user name and password which are beforehand registered into said 
authentication table are not obtained, or fixed time amount stopping entry rewriting of 
said host table and discarding this packet — in addition, the management method of 
the communication network system characterized by performing all packet 
abandonment that receives from the separation of a port which received this packet 
further, or this port. 

[0100] <3> In the management method of the communication network system of the 
aforementioned <1> publication a LAN switch When a response is not returned in the 
case where the user name and password which are beforehand registered into said 
authentication table are not obtained, or fixed time amount Stop entry rewriting of 
said host table and it adds to discarding this packet. To the user of all PCs that 
furthermore belong to the same VLAN as the starting point IP address of this packet 
The management method of the communication network system characterized by 
creating and sending the message which warns of the user of the setting mistake of an 
IP address etc. or malice performing tapping and the communication link of spoofing 
using the address of other PCs. 

[0101] <4> in the management method of the communication network system of the 
aforementioned <1> publication, a LAN switch requires the input of a user name and a 
password of PC of the IP address of this entry, when the entry new creation time of a 
host table and rewriting occur — in addition, management method of the 
communication network system characterized by requiring the input of a user name 
and a password of PC of the IP address of each entry still more nearly periodically. 
[0102] <5> In the management method of the communication network system of the 



aforementioned <1> publication a LAN switch It adds to requiring the input of a user 
name and a password of PC of the IP address of this entry, when the new creation 
time of the entry of a host table and rewriting applicable to the starting point IP 
address of a receive packet occur. When the new creation time of the entry of a host 
table and rewriting which furthermore correspond to the terminal point IP address of 
this packet occur, the input of a user name and a password is required of PC of the IP 
address of this entry. The management method of the communication network system 
characterized by rewriting this entry only when the user name and password which are 
beforehand registered into the authentication table are obtained about a terminal 
point IP address as well as a starting point IP address. 

[0103] <6> The communications processing means which transmits and receives a 
packet between (a) each port, (b) The starting point MAC Address of the packet 
passed from said communications processing means, Learn a terminal point MAC 
Address and a starting point IP address, and a host table is created. When rewriting to 
different information from the case where there is no entry which corresponds to said 
starting point IP address in said host table at this time, and it creates newly, or an 
applicable entry When it asks an authentication processing means whether I may 
new-create or may rewrite, consequently the notice of the ban on rewriting is 
received While stopping entry rewriting of said host table, when this packet is 
discarded and the notice of rewriting authorization is received When an applicable 
entry is in a key with reference to said host table, a terminal point IP address When 
the' packet output to an applicable port is directed for said communications 
processing means and there is no applicable entry A junction processing means to 
create the entry applicable to said host table newly, and to direct the packet output to 
an applicable port for said communications processing means, (c) If the IP address of 
each PC beforehand inputted through the administration terminal etc., a user name, a 
password, a contact mail address, etc. are registered, an authentication table is 
created and it is directed from said junction processing means While creating the 
message which requires the input of a user name and a password of PC of the 
directed IP address and directing sending out in the receive port of said packet for 
said communications processing means Wait to return a user name and a password 
and the message which tells the purport which the entry rewriting demand of said host 
table generated to the contact mail address applicable to said IP address in said 
authentication table is created. Put in as information the user name returned from PC 
into this message, and sending out is directed for said communications processing 
means. When a response is not returned in the case where the user name and 



password which are registered into said authentication table further beforehand are 
not obtained, or fixed time amount When the user name and password which notify the 
ban on rewriting of the entry of said host table to said junction processing means, and 
are beforehand registered into the authentication table are obtained The LAN switch 
characterized by providing an authentication processing means to notify rewriting 
authorization of the entry of said host table to said junction processing means. 
[0104] <7> It is the management method of the communication network system 
constituted from a LAN switch, (a) Beforehand each PC on a LAN switch A MAC 
Address and its user name, Register a password and a contact mail address and the 
manager of (b) LAN switch registers a contact mail address into a LAN switch 
beforehand similarly, (c) If a LAN switch creates the authentication table which 
registers the information of the manager of said PC and said LAN switch and a LAN 
switch receives the packet of the communication link between each PC to the (d) pan 
Learn the starting point MAC Address of this packet, and a host table is created. 
When rewriting to different information from the case where there is no entry which 
corresponds in said host table at said starting point MAC Address at this time, and it 
creates newly, or an applicable entry While being the receive port of this packet and 
requiring a user name and a password of PC of the starting point MAC Address of this 
packet Wait to return a user name and a password and the message which tells the 
purport which the rewriting demand of said host table generated is created. To the 
contact mail address which puts in as information the user name returned from PC 
into this message, and corresponds to said starting point MAC Address in said 
authentication table, delivery, When a response is not returned in the case where the 
user name and password which are registered into said authentication table further 
beforehand are not obtained, or fixed time amount While stopping entry rewriting of 
said host table, when the user name and password which discard this packet and are 
beforehand registered into said authentication table are obtained When an applicable 
entry is in a key with reference to said host table, a terminal point MAC Address It is 
the management method of the communication network system characterized by 
creating the entry of the corresponding host table newly and outputting a packet to an 
applicable port when a packet is. outputted to an applicable port and there is no 
applicable entry. 

[0105] Although invention made by this invention person above, was concretely 
explained based on the gestalt of operation, it cannot be overemphasized that it can 
change variously in the range which this invention is not limited to the gestalt of said 
operation, and does not deviate from the summary. 



[0106] 

[Effect of the Invention] According to the management method of the communication 
network system of this invention, the effectiveness that prevention of the poor 
communication link by the setting mistake of a logical or physical network address etc., 
and the cause analysis of a poor communication link and speeding up of recovery 
operation are attained is acquired. 

[0107] Moreover, according to the management method of the communication 
network system of this invention, the effectiveness that the security of a 
communication network can be raised by preventing tapping and spoofing by the 
malicious user is acquired. 

[0108] According to the information repeating installation of this invention, the 
effectiveness that prevention of the poor communication link by the setting mistake 
of a logical or physical network address etc., the analysis of a poor communication link, 
and speeding up of recovery operation are attained is acquired. 

[0109] Moreover, according to the information repeating installation of this invention, 
the effectiveness that the security of a communication network system can be raised 
by preventing tapping and spoofing by the malicious user is acquired. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is the conceptual diagram showing an example of the configuration of a 
LAN switch which enforces the management method of the communication network 



system which is the 1 st operation gestalt of this invention. 

[Drawing 2] It is the conceptual diagram showing an example of the host table used 
with the LAN switch which enforces the management method of the communication 
network system which is the 1st operation gestalt of this invention. 
[Drawing 3] It is the conceptual diagram showing an example of the authentication 
table used with the LAN switch which enforces the management method of the 
communication network system which is the 1 st operation gestalt of this invention. 
[Drawing 4] It is the flow chart which shows an example of an operation of a LAN 
switch which enforces the management method of the communication network 
system which is the 1st operation gestalt of this invention. 

[Drawing 5] It is the flow chart which shows an example of an operation of a LAN 
switch which enforces the management method of the communication network 
system which is the 1 st operation gestalt of this invention. 

[Drawing 6] It is the flow chart which shows an example of an operation of a LAN 
switch which enforces the management method of the communication network 
system which is the 1st operation gestalt of this invention. 

[Drawing 7] It is the conceptual diagram showing an example of IP subnet base VLAN 
which is the reference technique of this invention. 
[Description of Notations] 

11 — A LAN switch (information repeating installation), 12 — Communications 
processing means (control logic), 13 — A junction processing means (control logic), 14 

— Host table (control table), 14a — A starting point IP address, 14b — A starting 
point MAC Address, 14c — Terminal point MAC Address, 14d — A port number, 14e 

— An imputed network, 15 — Authentication processing means (control logic), 16 [ — 
A password, 16d / — A contact mail address, 21-25 / — A port (input/output port) 
31-34, 35 — PC, A B, C / — Message. ] — An authentication table, 16a — An IP 
address, 16b — A user name, 16c 
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(57) [fi»] 

it, TKuxBBEs^oiiwwigfissatr*. 

WR©#- h 2 1 ~ 2 5 £ffiS£ 
*7h7-^**iLTOlllOPC3 1~3 4£&£I 
f*C4:TVL AN 1 *J«fctf V L AN 2^<Dil(i*-y h 

h 2 l ~2 5 fcoffin?/^'? h©aHMt*fT33Bfll«H 

77H 4 (c£t?£&#- h 2 1-2 5BO/^yhOt> 

hf-7;H 4 <E>M*r8*fc:, EfiEr- 7/H 6%#F.SL 
TiifSjc^ P C CJf LTa— 9W*ffv\ KlE^a- 
*fO»^»CO**X Yt—T)V 1 4 0»*jft*.43«ktf/* 
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PC33C0IPT KV*= IOJ0.0J3 
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(2) 

1 

h fcttE* v h 7-*i***fcl4*y h7- 

^t**©me xtti*i#- h <d&* iz&mz tifcME* 

•y h7-^«B*Sfett*'y h7-^(f«»HOfflSra-p 
OfflflHINlOtSBM&ff^tfcfelc, ffiEiHStiWEKSS 10 
nsfliE** h 7-^1137 Fb7.fcJ:tf*>y h7-* 
»a7FUX©'>&< fcfc-^tflffEAtiJfttf-hi:© 

*$fcti*y h7-^*«81©««t«SgO«iW*8M 

fca«** h7-^^xxA^wa^?£T^^T, 

ffl*<D*y h7-**8**C*«SLfc1lllE*y S7-^H 
9!7Kl'X*5«fctf*-y F7-*»a«7 FU*©'>*< £ 
t>-7?U h7-*4$*£>a— tf£*5«ktf/*3. 20 
7- Kfc36W*SW»tT«tt*nfcBffir-'/A/*»et 
1 <DXt-v7£. 

fcfc-fioa.-' ftc*JLT, fluEa— «f*feJ: 
Ft aOBEKlEf— 7;Prt©f»&i— «f J: 

o*/U7- f taa^-f sa— •fEEfc^ru fluEa- 

O'fluEjifltf $R<D^§^HtT U WEa— »fKffiE*« 

mmmimmzmmtzm 2 oxf v 7u 

CIIJRJS2] W*«lffi«Oii(3*-y h7-*->Xr 

fluES 1 ©T.r-yT'T-fcL SUE* 'V h 7—5' »a7 FU 
;U3«ktf*-y F7-*1W17KU*©'>ft< £t-?5fc 
WLTv HuE^-^fJoitfiilg^-y h7-^'>7.xAtO 40 
*S#0 / >ft< 4: t-*oaiS^^-^7 FUXfcttfS 
ttttTESU «JEa2©Xf-y7'T«. fluEa~»ffg 

fr%Xt}ZnTcmlte-^&*^ts££UzffiUUm : r 

-7i\s<owsm»&&3E. b/c c h £ii*nir s * -y -t-^ 
*ms l xmm -r s miE* v v 7 - * mm f s fc 

«*>y h 7-^%a7 FU*©lfflEa— «f*j<}:tfBgfl 
©'>&< tfe-^03I^P«-yl/7 FU^KWLTSIttl 

ftuEH 2 (OXf -y 7*-e<OME3— ?REfc£J& Lfc i: 50 
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2 

f, SSEi&J»f--7';l/OIE*T%ai±'r*i:i:tfcijuEji 

ffiEE 2(0Xf7 T^OMEa— If Bttfc** Ltc£ 
f , BijEW®x-7;l/09M8f«r«J±T5 1 i: UcflfiEil 
AN* USB fc«BS«flWBoaSfil7cO«(»E* * 

h7-*Ha7 F UXSfctt^-y h7-^a7 FU* 

£0{g3iL AN (a— • x«J 7 • *-y h 7- 
7) tcM-r^TOiJE^y h7-^*B*Oa— tflc, flu 
E*-y F7-*8IJI7 FUX$fcfi*'v h7-*toS7 
FUXtSOESSX^ Hit©3— f^O^-y h7- 
^«*<07FUX*filoTfiltt J f»S:0"r*tOjiffl%ff 

WEW»r-yn/OKffH*«ftOS«{KI»«a:<, « 
^W*fc«^^tcflfiES'J®7 i -7;l/|^tc§iSSni'iflij 
E^-> F7-»«ia7 FbX$fcli^-y h7-^%a7 
F U^oa— ifKJt LTWEa.-" IfKEftUff-T S5tt 

a. 

o^ft < £ t -o^a^T-r * c t *w a 1 1 * i 

[»*«3] ^-y F7-^iS!*$fct4*y h7-^7* 

Xtiit}#-h£tt&*v F7-^JS*$rctt*«y h7- 
^f««BH:f*4Snfc*-y h7-^iia7 FUXfei 
tf^-y h 7-^7%a7 F < fe-**»(S(* 

v^ra»ofl9Exm*jj?-Foi5-^K»i««nfcfiaE* 

«y h7-^iS*$fett**y F7-^iftliaB©fflSraT 

nsfluE^-y h7-^iia7 h'isXts£ZS%v hu—> 
tym7h'lsX<D'P%<£$-J5£mZK&tl$-b£<D 
»(SB«OEft**S LTMEWUf— * 
CtT% f}EXa*!K-hfcWrS«JE*y h7-^« 
fcti^-y h7-**«8H©»8M£«©»WftfgM 

^wtit r * 4>n85Qa#is £ z%tsmitpM*£mT& o 

T> 

mo**y h7-?iS*fcttf&L;fcSfiE*v' h7-^H 
37 KU^itf^'y h7-^mS7 FUZ<D'>4< 4: 

7- Ft, WEa— •f*«ttfilffl*-y h7-^->XxA 
©ta#« / >^< fct>-?3©jl*85fey-;I/7 FbX^W 

WEWIIf— ^/W©a§f*ff 3 MEilfll1imoi9SA^8 
4 LfcB#, ME39A1R «©8»*J:tflttE«l«P^-^;I/ 
©MfrfcifcftoT, WE51fflfllffioaSfi7t*5«ktf2lfll5t 
tfc-yjOflljEa— «f{c*fLT> a— VftfeJ; 
tf/<X7-KOX**«#U A^Snfca— if«fe«fc 
th*/^X7- F SuEfgSE-r-7^rt<DftijE3--»f£t5 «t 
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3 

MUX® 5> ttfcitu!Ea~tf £ i; huIBSiJ'^x- 7~/KD mm 
a— »f KBEKfctt bfc £: t tiME^T-TVl/coMiT*: 

vmmt. io 

[#§flJ3<DP;Si«E] 

COOOl] 

LANCLAN: Local Area Network) X-<<y^(Layer2 X 
-f-y?\ Layer3X-f 'yf-H) £W S£tl3-T y$%'V F7 

7-^>X-rA (LAN7-T7f*7h7-^->Xf 
A) ©lliTjfi^tCjifflLTW^WCifl-r^c 20 
[0 0 0 2] 

[ft*<D8ffi] LANX^7 ^^t^rnm^ V L 
ANCVLAN: Virtual LAN) VLANtil'y?^ 

#-h^-XVLAN> MAC (MAC : Media Access Con 
trol) TFUX^-XV L AN, Laye^O r- 3/1/^- 
XV LAN, I P(IP: Internet Protocol) +r7**-y h 
^-XVL AN^<D€l*T*ftlSn-CV£o . 
[00 0 3] *HB^cD##^Tii, 0tJ*«:EI 7 IC^I" 30 

1 P^7>-y F^-XVLANcDiIfi*-y r-7-7->7. 
xAt:te^T*g&<D#- F 2 2 1 -2 2 5£fl§;l/cLA 
NT.'f-y^ 1 OliPCCPC: Personal Computer) 2 3 
lfr5>PC 2 3 3'VD/^r>y r-Srgflf 3 h 
£>te£MAC7F*bX, ^MACTKU^ I P 
7 Kl/X^fgLtt>X hf-^Z 2 0«Mt5„ 
%(>:|gj£ I P7 Kb***— Fx-://!/ 2 20?: 

'yh^ttl^-rSo !£SxyFU»^-&«> ;t,— 

(H^SSL,) fcitfAR P(ARP: Address 40 
Resolution Protocol )7—7)\> (MttML) %#P.8LT 
*^Xh*7^J6> I^fS^XFx-TVl^ 2 0 

tU^-r^o LANX-Y-yf-2 1 0 liC£><fc 9 LT P C 

2 3 1 frt>PC2 3 3^\<D/^-y FSrfaif 3o 

[0 0 0 4] ££>fcL ANT^-yf^ 1 OTii, £JBM 
fc*7. 2 ocoxy hV*mML. Kt/cKA 

y-yh e.^S-T ZCtlcZoXlglCfrXh x-7";b 2 
2 0<DxyF'J*MSTUTV^fc46, PCtfilLfcl 
£?fc&$j7t©^ Rc/^-y F£EL< TOUTS 50 
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4 

tfT'£3o -r^^PC(i^»)Lfc^Tt^ilJHiiil(H| 
[0 0 0 5] 

[^tfSI&Li^lTSlllI] LfrL-&#6, ±fE# 

[0 0 0 6] ^ 1 (Dg^WISSti, IP7FUXHCQIS 
£5XlCttLTMl&C£-c--&5 0 fH*tfPC2 3 2 
7b^ P C 2 3 1 CD I P7F1/X^T^ F 2 2 

f- 2 1 0 Xlt P C 2 3 1 F 2 2 1 1-2 2 

2(C^»jLfci:¥Wt, ^<9<fc?{C*7,l>x-7/U2 2 
0£»#$;iTLf:5o COSf, 1P7FI^X£IEL 
< fgffl LT^£ P C 2 3 1 *HifiW** < &3H<9iI<g 
^&t)m$.t%>o gfc, *«y F7-*K«a!SnSPC 
©IfeA^i/^I^tcfi, COfflflRS&fiDDHfWIIIUfca:, 

[ 0 0 0 7 ] « 2 OSfBmHtt, jHUDa— «f t J: 3 

C 2 3 5tf P C 2 3 1 <D I P7 KU**R£» F 2 
2 5K:«ttUfci:-rSo COli^ LANX^7f2 1 
0fliPC23 1 tftf- h 2 2 1 F 2 2 5 {C^ 

BUftfcfiJifU : e«D c J;9t^Xhx-7';l/2 2 0?:* 
tg§K.TLS3c COlg^, PC 2 3 5^PC23 1JB 
©ffl«r-**3tt*oTSSHUi9, f fcPC 2 3 1 

[0008] giawsst^iftiawft 

[0 0 0 9] *mi<D®<03Wit. MM<o=l— ^ftCctS 
SHIP'S: 0 -f $ L*W <- £ Tilfi* -y F 
iOt+a'Jf-f ?:|pl±$-ti-?.ili;A^pr^iifi^ , y F 

7-^->xxA©gasffifccta i 'if$8cpifaffi^m-r 

[0 0 10] 

^*<oxai*^- f {cm? zmmwm*mmc&mt 
%c tt>^m%mmzv vv-toywmyjmcts^x , 

1S$80SS^^^ i: f 5 llPjflf — ^I/©H#fS**^ 
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5 

[ooi i] ztz, &a~ tfss**3«tt;^7 > 7 i Asa# 

>y F7-*7FUX j £tl— tf€, AT^-F^tfte*^ 
IB Lfc ^ -y -tr- $>*jMM» ^£<i5t<Qa-»fc J £>' 

coo 1 2] £r>m»mzn. wto#^ io 

[0 0 13] fgKDftjreii, #«Efcl:, LANXl'-y 
^T-«^-r^aff*'y h^-^Xr-Mcfc^T, I P 
7 Klx7.l?0^5XtcJ;531ffl^m, BM(0=l— >f(c 
i^Bl^t) L»<'C i^T'tS L A NX^f7 

1 IC^-T I P-9-7*-y h^-XV L ANCDiIfi*-y F7 
-^i/Xf-Atfct>T, (a) P C 3 1 ~3 4 (i L AN 
X-T-v^l Uc^61 P7 FUXi^Oa— if£, Ax 
7-F\ S*S5fc*-^7FUX£MU (b) LAN 20 
X-f-y^l 1 cD^IMtlRltStCL ANX^-y^l HCf- 
A6»iS5 1 c^-;l'7Fl^X^g^t, (c) LANX^7 
f-timfBPC 3 1 ~3 4*5<fctfM!fiL ANX-T-y?- 1 1 
<D^a#©1ffB£3£i^SlgfiET-7Vl/l 6£m&U 
(d) $6tCL ANX-<'yf 1 lttPC31fr&PC3 
3-vCO/^-y h^gfi-r^tx /<*y FO^MA C7 
FUX, ,MMAC7KW, jl&jSl P7FbX£^S 
Lt*xhf-7;H 4 (0 2) £ftl£U COtZm 
!B*XFx-7VM 4 WcMIB&jSI P7FUXICM 
St5x> F U fT&ttfWSlf ^Wiixy h 30 
U tS^^1fH?{C«t^5^i, IS^-yKDgffi 
#- F T\aof£/^ >y F<D#i.6 I P 7 F UX(Q P C lea 
— f&t^7, r 7-YZ:m$.?Z>£t*>\,z., a— if££A 
X7-FtfiI$n§<D£t#oT, HufBI8aiEx-7VH 6 
©*<Db5!B&£I P7FUX(C^^-r^a^^-;l'7 
F1^X(C*X 1 4 (DW2&z.mMt>m3iLrc 

WZBitZtv-k-iS -y-t-~>*0*tc P Cfr e>31 

7-Ftff#6n&frofcii£ (-^BfP^rttCJt^ji^ 40 
tlKfritzm&^ts) its jHXFx-^H 4£)xy 
F'J«#^!^^cp±-r2.i:i:t>{c^^-y hfcJUSIU 

7-FAM#5.n/c^(is *S£I P7FUX£*-K* 

it, m^-hic^y b^mtiL, ■ 

;l'-fi , yy*f-7;l' (EI^&L) fcJct/A 
RPf-7/l' (0*3*1,) *#H§tT^^Xh*-y7'^ 

K^-r^^xhx-^n 4<ox>'h';^fTM(t 
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£ t % L A N X-T -y -y h 7- * ->Xx AcOSST? }£ 

[0 0 14] ±13^1 ^M^Jz^LANX^ -y^^-y 
F7-^->X^A^Wa73^1:^s PC31 litf-F 2 

m*SMmmffl?z>zttf?2zti\ lan 

X-T-y^l 1 A^^*bS^L/-cn.— »f^t/^X7-F© 
XtS^lbibtl^rctb. ^©/<:X7-F£ftloT^5P 

c 3 1 imtfpc 3 i*goTSKL/co, ^o-r^L 
fc^-r set 5o sfcpc 3 2*<pc 3 1 

Softf^ft, PC 3 lfeitfLAN^yf 1 1© 
Mgte^OgfcfiAS* •y-fe-v' (** -y-b— 

kp c 3 2 ©a— »f£#Atte>ntv3) tfas&nso 

T\ P C 3 1 Oa- •f-f LANX-T-vf 1 1 cDWS^ti 
[0 0 15] %2<om&V&* *»UBH\ (a) 

f 2 1 ~2 5 ^owe^*? hoasMMtfT 3 aniaaa 

#® l 2 i: , ( b ) MIBaff XWS l 2 6 » £ ttfc 
/^■y F Z>&£M A C 7 F U-X, ftj&M A C 7 F U-X, 
te^I P7KUXS:fitT*Xhf-7'/H 4 (0 
2) JgrfMU C©£tMaB*XFr--7/M 4©*tc 

*%ttrzi§'&l*. SuIB^X Ff— 7*;l/ 1 4 ©xy h >J» 

AffBTOiia^S^fcJg^H:, MI P7FUX^- 
CituiB*XF7 i -7>l 4«#1U IS^xyFU^W 
S«^ti, ^^-F^O/^-y FtH73*ICiBilMffia 

^y^T—yn (m^MD ^3<ttjfA r pt-7^ da 

Tj^ftl L) *#S5I LT* i^X F * -y 7'^?*46, buI3*X F 
7—7)11 4JCKa-r5x>F'J*«f«Kf^fiRLT, ^ 
h'NOAT-y FU7J^BulBa^«La#S l 2 icm 

7ik?z>fpm!m&® i st, ( c ) ^fegais* (mm 

ML) m*ftLTXtl-$nrc&PC3 1~3 4©I P7 
FbX, a— AX7-F\ JtlS5t^-;I/7 FUX 
S?*SSLTKBEt- 7;H 6^ML« milB^Wi 
#151 3*6«S«ti«i:, Jg/T^nfcl P7KUXO 
P C a— if ^ i: / ^x 7 - F o A73£g#-f 5 «y -tr - 
i/Z<m LT, -y h F-\©aitiJ«rHijlB 

aftsaa#isi 2icm*-r^ti: ! L{i:, a— »f££/<x 

7-F!b' ! M^n5cD^#oT> SiffiKBEf— 7;H 6£D 
fptOtulB I P7 FbXtcK^TSjUS^^— ^7 FUX 
£*X Fx-7"/l/ 1 4 coxy h U#*»AE«««»fiL 
A p< -y -b-v 7 (** -fc- s?otp t P C e. 
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#t>£tr) «, i!if2*xF-f-7VH 4©xyhy©» 
x-7VH 6lcH»«tiT^*a— «f«4:/<X7-F«« 

»*si7Lft : Rr*t3i5«t'«ijaa#a i 3tii*a-ri>igio& 

f - 1 1 ftllttt*. 10 
[0 0 16] ±3ES2©«jS»C*S L A NX^^fl 1 
ICitttf, ±KSS 1 OMjSOL ANX-fyn-y h7- 

[0 0 17] W3 0«jjST»tt, ±E«filt©L 

mc^iRtta^jit 1 3^6«**nfc*x hf-^ i 

4(Dx.yhU<Dl P7FbX©PC&ca-+F*£/SX7 
- F O Xfi fcgsRT 5 * -V -b - 5>*ftJS L T , K> *5r -y 
hOSfisK- h^<Oiitb*BijieilfB«ia¥S 1 2 lcj§* 

l> ^feKSEf—^i/i 6 fcaasnrv^sa— 9 s * i: 20 

Ftft#e>ttfcfrofclf£ (-J©i*IBIrtfcl&*# 

4 ©iy h y <Dm2»z.%it*mm*mim&& 1 3 tc 

[0 0 18] ±l2S3<DRjStJ:SLANXWyf-l 1 
tC <tntf , I P7F UX*©KS ^ X*PMM<D3-—*ftf 
fl&OPCOTKUXi&ffioTae^&O-rSLTjl^* 30 

[0 0 l 9] SB4flDftjS-p{4, *»Wtt, ±iE*lS0L 
AN^-yf l l t*5^T, tuEISsI^il^ia 1 5 It, 

mEfrmsmtt i 3 *»6»«snfc*x f-t-tvi/ 1 

4£>xyh->j©i P7FU-X<7)PC{c:i— f*£:^X7 

hOSfitf- h^£0^tH^Bul2iifflS!ia¥IS 1 2 fc|g* 

/<X7-Ftf»5ftfcfrofc*£ (-SBB*IHIrtfcfll»«' 40 
I^nWoftitfe^O) ButE*Xhx-77H 

4 coxv h >j £os#e5^»±*H5i2^i8saa¥ia 1 3 ic 

i!»Tt57cttT'fc<> K/<y?KDi&j£U P7F^X£ 
|W|— VL ANldl-f£T<DPC<0:a— -Wc, IP7FP 
Xl?CQ!S£ 5 X ^Sitoa— if ft^ffiflO PCOTK UXS: 

ffioTKis^ft o-r$ L<oam^T^3 LTV* ping 
[0020] sfc, m4(om^m\<ommtLx. 50 
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Bmi, ±ie*§J#© LANX^7f 1 1 tC*5V>T, Huieig 

fc*XFx-7VH 4CX>hiJtf)I P7FUXOPC 
a— if* fc ^ X 7 - F © Xti %M$.T 3 * v -tr - 5?* 

Saa#ISi 2fc»SU ^fc&SEr-TVH 6{cSii£ 

nr ^ s a— »f * t / ^ x 7 - f 5 nft o fciiB- 

S5I2iSEx-7;H 6 <Dtp<0flH2{&S I P 7 F bX 
izW<MtZ>W&9c*-)\'7 Fbxicfrx Fx- 7/1/ 1 4 

lt> Huisiifssaa^is 1 2tcjt^tT^to?-a-5ci: 
^^t-rsLANx-r-yf-i \ *mm%o 

[0 0 2 1] ±8E*4 0ffiMifC«kSfl9#OLANX-ry 

^i ncinif, i PTFuxsso&ssx^gjfcoa 

— WffiO P C <D7 F l/X%fo TSl^^; L£> 

[0 0 2 2] *fc±35S4 0«jSK:J:S»#OLANX 
^e>nT<i.^-;U=&SR< LThvb-y^ffl«:MP.-ril 

[0 0 2 3] S5 0RjST?«, *%B^«, ±E*J«OL 
ANX^yf 1 1 tev^T, BuieigESQU^IS 1 5 tt, 
*X l 4 coxy h U ©SfSff^^lrSiA 

X7- KOlBHf^te**ff 5 C tznmttz L A NX 

^r<y^i i%ffi«-rs. 

[0 0 2 4] ±mm5<Dm&fc£%L AN^7f 1 1 

^PClCO^Tt, I P7FUX§OR3S5X*LT^ 
IlOa-WffiCP C© 7 FUX*ffioTJS 
If ^ ^ K> t £ L © JlfS^fir o T l V ^fr? x v 5 1 Z £ 

[0 0 2 5] £fc±feSg5<Dl!£KJ;SL ANX-Y>yf- 
tCctnif, ^-FSScSX- 1 P7FUX!S£SX3i 

Mtoa— yjy, *nS1?KiE43.-if<DPCtf» 
«LTt^fc#- HC, ^OKIEJ&a— »fO I P7FUX 
%85B£L/TPC%»«U fiHS^O-rS L©ilfi%tf 
o T i ^ 1/ =f- 1 -y ^ t -5 C t T? t -5 0 

[0 0 2 6] »6<D«jSTtt, *fgB^(i> ±E«iaOL 

a nx-t v i- 1 1 £33^t\ wss*«uaa#a 1 3 

^{g/^-y hOjfoS I P7 FUXfcKSf hf— 
7;l/ 1 4 ©xy h y ODf^f^fiicBS-f Ltc 
m&£s *n*»**ATAl^lWBKiE«BI¥S 1 5 
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[0 0 2 7] ±feig6 0tSl&(cJ:3L ANX^-y^l 1 

VPCKO^Tt, I P7 FPXlfOt3:£~X£LT^ 
4lr**\ 3Rt©3.— IfaWBOP COT Kl/X*«oTS 
ft 4 ?* 9? S LOiidfcfr oTl^l^fi «y *f 5 C 10 

[0 0 2 8] Sfc±ffiS6 0«^KJ:SLANX^yf- 
tititf, #-h&£UX- IP7Fl/XS^Xf 
^ Ilffja-ftf, j en*"T?SiE4a--«fOPCtf» 
ttLTWfctf-Mc, ^OXIE&:i— tf<o i P7FPX 

ft«teLTPc*««u artw»4«?-r*u©jBffliftff 

[0 0 2 9] 

[0 0 3 0] H 1 (i> *»WOS 1 OUSJMT'&SiI 
fg*-y F7-^:>X7AOgS#&£»f 3L ANT. 

1 Ptf7> v b^-X V L A NO-ffJ^rtt^HT* 
So Sfc, 0 2*5<}:D*0 3(4, *nM(DBM<DL A NX 
>T-y^fc:Tffli/^tiS^ll*iJ8PfW«O-0i|*^-r«t3g: 
0, El 4, 0 5*5<fcl>"06(4, #ll$20Jgf§OiI{i* -y 

h 7 - 7 is X f AOSa^ffi 43 * tf L A N X -f y 9 affi 
fflO-i^t7n-f t - htfeS. 30 

[0 0 3 1 ] #Hfi60J$iOL ANX-T-yf- 1 1 tt> f 
{ILfc/^-yF OfslPfi) fr6¥BLTffrRUfcB2 
Oi54*Xhf"^/H 4»cSrJ##^-h2 1-2 
5B8«/^y KOtfai%ff3i:fck:±»)» PC 3 1-3 

*«i«aa^a 13^ mtmm^m 1 5 £fre>*g$ 
[0032] mmmmmz® 1 2 h 2 1 ~ 

2 5£Ol«T'/S7-y hOjggfcSrfTd^S-e&D, fl»J*. 
(fCPU, ASIC, RAM, R0Mf<iDlff/W7 40 

[0033] m^mmm^m \ 3(4, *x hx-Tvu 

1 4(Cg-3'££#-F 2 1 ~2 5^0/^7 >y bOWS: 
ff5¥aT?*»), #R(4"CPU, ASIC, RAM, R 

[0034] 02(cfi?iJ^2ft54:3i;:, *xhf-7;l/ 
1 4(4, &j£U P7FUX1 4 a, Jfij^MAC7KUX 
1 4 b, MMAC7KUX1 4 c, #-h#^l 4 
d, 3R#-haMBJRT«VLAN3SW*v h7-*% 
jjVT»JK*V b 7-* 1 4 e, Sg?©1S«^»Cf*tt6n 50 
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[0 0 3 5] BuIEISESaa^© l 5(4, *x F-r-7;b 

CPU, ASIC, RAM, ROMfO«ff/W7T 

ii^$n§o **«Ai^«p)*jj£osi:ft*fli*«K 

BEr-7/H 6 K^a&SSL (SWUTV*. 

[0 0 3 6] 03(4, *HllO»LANXY-yf 1 
1 KTfflt^tiSKIEf— 7VH 6©«|)«HT**. IS 
Bf-Ml6ttt, PC3 1-3401 P7FUX1 
6 at, *«DPC%fiMl/T^-6a— 1 6 b, /<X 
7-Kl 6 c, a»Jfe^-;l/7KUXl 6d^46n> 

[oo3 7]jt*\ pc 3 i*^pc 3 3icmmt^>m 

[00 3 8] 0414, PC3 1^5>PC 3 3lC3ifS-r?> 
if £-0#||jSIOJ£<gO L A N X-f y 1 1 *3 .fctfilfi* 
•y h7-^->XxAOSil73ffi<0»lf^<0-fl?lJ^-r7P 

[0 0 3 9] &*5&P C 3 1 ~3 4(4L ANX-f-yf- 1 

l8$fc*-./l/7KL'X*SSU LANXY-y^l KDf 
S=gfc|p)«ltcL ANX-f -y?M 1 fc^l&at8$fc*-,rt/7 
FU'XfcHSSU LAN^7f 1 lfiHUlEPC3 1~ 
3 4 fe<t tf huIE LANX^f7f 1 1 O^S#Olf $fi£H 

srsBffi^— 7";n 6*ffjaLTa5*tofr*. 

[0 0 4 0] PC 3 114, P C 3 3?B0^7'y h%ffo# 
LT#-h 2 1 (c&tB-rS (Xf'vT'l 0 1 ) „ 

[0 0 4 1 ] L ANX-f-yf- 1 1 Offl{§MSI#K 1 2 
14, BuIS^7-y 2 1 fr&£<8*ttSLT'Mliffi 

a^Sl 3(C)87 (Xf-yyi 0 2) „ 

[0 0 4 2] (t»««ia#® 1 3(4, £ft^7-y bOte£ 
MAC7KUX, *$j£MAC7KUX, ftglPTKU 

*Xh7-7;H 4 0f (CitufB&£l P7KUXKKS 

tft£Stff$B(i:»t$;i&i§i&(4, Bx>mj**£« 
(«f«ffi«t^€r) fti/^BKffimt i strain 
^t>-a-« Ut7 7"i 03) o »ti5xs^g GWjBff 

ti&flts) ^«V^B-i4X7-y7l 1 0lcmts o *7- 

zimmmtev 1 /-?7-y h gcD7-xT$.o, %\Mim 

K07-XT(4X7-y7l 1 OlcmtSo 
[0 0 4 3] IgfiEfflS^IS 1 5(4, a-fSt/U7- 
FOA7Jg5M-y-t-^ Wy-b-^AkPf*. ) *ff 

(Xf7 7*l 04). 
[0 0 4 4] jiffjaa^lSl 2(4, ^y-t-S?A*K/< 
7-y hO^I#- h (COi^, h 2 1 ) OK I P 

rh'uxmcmmr^ (x7-y7io5) c 
[0045] mimm^mi 2(4, y-y-b-^AOfS^ 
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* y -tr- v\ t*t>% x— (f * t>^-Y<D\1i*v 
■t-is •y-fe-v'B So ) £P C 3 l frSgfrf 

l 0 6) „ 

[0046] mmmm^mi 5&, ^-y-b-^Bid 

SftTI/^ I P7 KUX> a— /U7- 
Elf -7;l/ 1 6 lcWfrftTl->2> IP7KU716a, a 
-If* 16 b, /U7-K 1 6 c^JrbKLT-grfSC 
fc£»El,fc1& BSEx-7;H 6©teSxvh UfcS 

ss^nrt^a^^-^j ki^t. i 6 d ic*x hf- 10 

7;H 4©*#»*E##££Lfcg*fc*.S*-y-fe- 
So ) £m£LTiIfI$4Jl*Kl 2ic£tt}£m*-fs 

am&fsti 3(c}ia-rs u-r-y/i 09) . 
coo 4 7] mmmm^mi 2 it. *vt-*Jc*&* 

-rt/TKUZJBlcaStU-f* Uf771 0 8) o 
[0 0 4 8] -7i, 4>Hlffll!¥S l 3ti, BSEffl9^S 
1 5frfc»£»AifRj©H©il*D*£lt5fc, *Xhf 20 

1 P7KUX£+-lc*Xf-f— 7/M 4 4#SU K 

^iifl^axgi 2t«jj*u KaxyhUjW»^»ft 
^-f^^f-^ (0**8 L) fc«fctfARPr 
-7;U (H^teL) £#F8LT*^Xh*>y7£i3W>, 

Ka-r**^ hr-^/i/ 1 4 ©xy h u*»faicfl!jau 
t> tsa^-h's©/*^ hmzmmmm^mi 2tc 

mmT5 Uf7 7"i l 0) o 

[0049] mimm^m 1 2 ^/^>y 30 

-MC&ffifS (Xf -y7l 1 1) c 
[0 0 5 0] W±K<fc9, PC 3 1^5. PC 3 3^<0il 

[0 0 5 1 ] #fCP C 3 1 tftf- b 2 1 h 2 5 

iCfemLfzik, P C 3 3lCjH8-r*«£0»lttfCO^T 

[0 0 5 2] PC 3 1 ©I PTKUXfCiSi-TSxyh 
•J#8Efc*X hf- 7;1/ 1 4 {CTtT^S^tfitiM©^ 
-XtgftStf, ftfmB4fcjjVr7P-f--ir-hi:IB| 

cffijt^-r^o 40 

[0 0 5 3] PC3U4, PC 3 3&MDA'ry h&fNic 

tr^-h 2 1 (OMttifs (xf'^i on. 

[0 0 5 4] LAN*f-yf-l l©ffldJ&g#ai 2 
14, b5IB/^>v h*5MMafflLTfflWfl9¥ai 3 *c« 
•f (X-f y7l 02) o. 

[0 0 5 5] (f««La¥S 1 3(4, v h©&£ 

MAC7FUX, %j£ I P7FU 

X£'^LT*Xhf-7>4/l 4£m?!c-f So £©££ 
*Xhx-7;H 4 ©(ptcfluIB^ I P7KUX£RMJ 
tsxyh'j < trJgtefMt-rs^&^SESxy h 'J 50 
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fcgft-51tlfi£#tlfSx.£Jl£l4, Kx>M*»*8S 

£fc#* (Xf-y7l 0 3) . Itl^ai GBrffif^ 
tf&^Jf£t4Xf -y7i l 0tlty o 

xyHJ©1i&£#tmsfc&&Xf^7tclty&© 

[0 0 5 6] BiEffia^ai 5«\ X— !f*J:/<*7- 
K©X7jg#*'vfe-^ (^-y-b-^A^^o ) *tt 
EStLTilfi©H¥ISl 2fcaStti«B*Ufc!fc -JgtfRB 
£fO (Xx -y7l 0 4) o 

[0 0 5 7] iifisanxis 12tt, ^ v-fe-S>A*K/< 
y-y h©Sffi#-h©&I P7KUXJBtc2iar5 (X 
T771 0 5) c 

[0058] mmmm^m. 1 2&, *vt-^A©£«F 

*<y-fe-* tft^a-f€i:^X7-K©A^^ i y 
-tr— >* (^7t->"Bt^*o ) £§fgfS£, 
SLTKSEfflg^Sl 5fc»* (77 7^1 0 6) . 

[0059] smi&mm 1 5«, *vt-i/Biz®M 
sntvsi P7KU7, x— «f«, /<*7-Kfc, as 

if- 7;H 6fC#frtlTV5 I P7 KUX 1 6 a, a 
— f* 16 b, /*X7-K 1 6 c%Jt«UT-a-r*C 
i:*SIBLfctL Rffi-f- 7;H 60K^x>hytcS 
SSftTVSSISSte*— ;l/7 Kl/7 1 6d tC^T. hf- 
7/H 4©»***B*««a4Lfcg*eit*^ryb- 
>* (^'y-b-^C^if^o ^-yfe-^'CcDf fcti^-y-fe 

(7T771 0 7) fcfcfclC, ifi^PCl^W 
«ia?®l 3tca^-r5 (7>f-<y7l 0 9) o 
[0 0 6 0] jiflfl&gxai 2ti, ^-y-b— >*C*^ 

-yi/TKuxjBfcasm-rs (xfy7i os) . 
[o o 6 1 ] -7?, *«i«ia?a 1 3 it. mmwtm 

-7;H 4<DKax>hyost»A*m\ 
I P7Kl/7^-i:*xhf-7;H 4%#FIb, IS 

>l~ f-jy?7—7>l m^rML) *3<fct)FARPf 
-7^ (BjjMKL) ^#FIbT^^Xh^-y7^i6, 
R3t«*7hf-7;H4 0x>hy *«fffit^t 

r, isa#-h^©/^«y mi**iie«ia*a 1 2tc 
fi^-rs Uf77i i o) o 

[0 0 6 2] fflffljail^ai 214, K^t-yh*8SS# 
-h (C©«^ ^-h2 5) iC^m-TS (Xf-y7l 

11). 

[0 0 6 3] W±fi:ii9, PC 3 1 (4^-h2 lfr5># 
-H2 5'\iMMIt». PC3 3fcOjiffl*SKiW»tSM 
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[0 0 6 4] #(CPC3 2#PC3 1 CD I P7Fb7.% 
m-oXmm, tf-h 2 2»CffiRLTL$l/\ P C 3 3 fc 

[0 0 6 5] [15(4, P C 3 2tfP C31CIP7KU 
XftKoTBBE, #-K2 2»c«M«UTU*v\ PC 3 

ANX^7f 1 1 fcJcOM^-y f-7-^->Xfi»<Df 
a* &CDft|{t o-w**f 7 P + - F X'tb 5 . 

[0 0 6 6] PC 3 2(4, PC 3 3ft<D>Vrv h&f&A 
LTstf-F 2 llcHSta-T* (Xf7^ 1 2 1) o 10 

[0 0 6 7] LANX^7f 1 l<DffifS«iS?&l 2 
14, MB^-y h3£S®JttatTf»Jaii^Sl 3 (CM 
•f (Xf7/1 0 2) o 

[0 0 6 8] 4«S¥a 1 3(4, h<Dtii& 
MAC7 !*,£MAC7FUX, I P7KU 

•rsxy h y jwm< ffSHcffrt-rsii^^Kax^ f u 

i:aa:*1IHB»!:»*«A*Jt&tt, s£x> h y%»#g| 
x.T (IfajtftfiJck^ty) &^jWBHE«m^S l 5tcBv^ 20 
^■t)** Uf-yyi 0 3) „ OHHtt 
figt^ty) ^^tixf-yyi l 0(ci§» o 
7>(4PC3 2#PC3 1CDI PTKUXfcKoTRJE, 

#-f 2 2c»aiuTusi/\ p c 3 3 tommzmttb 

Ltc l Atyhgwt-Xt'&t), xy MJCDtf$B£* 

[0 0 6 9] EBBaS#a 1 514, a— «f*fc/<X7- 30 
WO Uf771 0 4) „ 

[0070] mmmm^&i 2(4, ^y-t-^A«R/< 

y-yK0S«sK-h (CO«^, #-F2 2) ©K I P 
7KUX5BfCj5ltiJ-rS (7f77l 0 5) o 

[0071] mimmmzi 2(4, ^y-t-^A©js» 

y< -y -fc-v\ f *f* KOX*^ -y 

-b-^ (^yb-^Bki*-K. ) Z%iE?%t. %im 
3 LTBEfflS? fi 1 5 (Xt «y 7 1 0 6 ) . 40 

[0 0 7 2] KBMJiEMSM 5(4, ^■yt-^BCfitt 
^nTi/^ I P7KUX, a— «f£, ^X7-Kts E 
ffiE-r-7/1/ 1 6 icWfrtiX^Z I P 7 K 1 6 a , n 
-If* 1 6 b, /U7-K 1 6 c£i£i&LT-ifcLT^ 
&i^Ci:£5tELfd£> EtiEx-7/H 6cDiS^xyh 
•JtcSSSnTl"»*jfil55t^-;l/7KU^ 1 6 d(c*X 
F-f-TVM 4©#£i!l*E#tf«£L,fcg££*.3* 
<y-b-y (^y-t-v'C * vb-i/C<DWat 

* <y -fc-: V B KlMftSttTV*:!-' *f££t»fBi: LTA 

ns, ) ^fiELTii^ffiJi^si 2tcasm*}@*-rs so 



ftffl 2 0 0 0 - 1 7 4 7 9 6 
14 

(Xf77l 0 8) fcfcfctC, »*8ia.£l±<Dl*tp8 

$&g#ai 3»caat5 Uf77i 22) „ 

[0 0 7 3] jlfgSag^lSl 2(4, *yfc-5?C*R* 
-;l/7FU7.^(CiM(±i-r^ (£©!§£, *vfe-S>C 
(4, PC 3 2{Cfe^TitoT»^«nfc 1 
XBE©mW#T'fe5 P C 3 1 ^(C^-yt—>"C^3M5>n 
5 0 ) Uf77l 0 8) 0 

[0 0 7 4] -7?, *MI?Sl 3(4, KSBfflS^S 

-7;H 4OKax>hy«0«t«A i &*±U 12'^ 
•y F^fgSHTS Uf77l 2 3) o 
[0 0 7 53 W±tC«fc»K PC 3 2#PC 3 1 CDI P7 
Fl/X^ioT^, #-F2 2(Cg$|LTL$o7cii 
B-T'fc, KIEC0PC3 lfccty'LANX^-yf-l 1 OS 
S#(C^cQt££*.3y -y-b-i/' -y-fe— (C 
KK«»f^*ff ofeP C 3 2 ©a— «f:gtfXn5ftTV 
5) #i£5>n5CDT\ PC 3 l©a-fVLANX^7 

[0 0 7 6] ^(CSlcOa— if CD PC35^PC3 1© 
I P7KUX^ #-F25(CjgHEU PC33i 

[0 0 7 7] 06(4, J¥,St0a-if CO P C 35tfPC3 
I© I P7HUX*IBE, #-F2 PC 3 

ANX^yf I 1 *3<tt;iifl*-y h7-*f7f A©W 

[0 0 7 8] PC 3 5(4, PC 3 3JBO/^y 
LT#-F 2 5(cJMtBt*?> (Xfy7l 3 1 ) , 
[0 0 7 9] L ANX-<7f 1 1 C0jifS®a#a 1 2 

(4, mmrt'rv h*&mmmLT*mmm^®i 31m 

t (Xfy7l 02). 
[0 0 8 0] rpm9BM¥®\ 3(4, S(g/^'y hOfe'S 
MAC7KUX, H^MAC7KU7., I P7FU 
X*fSLT*Xhf-7;H^Mt5o COtt 
*x h7—7/l 1 4 cocpfcMfBte^ I P7 KUXJCK^ 
•T5xy h U *r8i£fts fiScT SJf^fKSxy h 'J 

(fT^ffJSt^ty) fil^BEffll#ai 5EEI^ 
^*>*S Ufy7l 03). StftAS^B (UStt 
jSt^tf) *^v^I^(4Xr-y7l 1 0(Cjlty o 
X(4SEc0a-+fO PC35^PC31iDI P7KI/X 
^K^, #- h 2 5 (CML, P C 3 3 tOii«*Bfljl6 

#}§!^5fc46^X7 L -y7(ojitytc0i:-r5 0 ^fe*^- 

tcV>, h@WKco'7--Xt,^Xf- y7(C3Styc 

i:(;:^§o 

[0 0 8 1] KSEftia¥a 1 5(4, a-f«t/U7- 
FOAaS^-y-te-S? (p{<y-b— yAtnf^*, ) *ff 
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m-? af-y^i 04) c 

[0082] mmwmm zit. *vt-iSA*w* 

[0 0 8 3] ilflJaa^g 1 2 ti. * -y ACDj£g 
^ -y-t:-v\ "T^b^x— «f*i;/*X7- Y<DX?]*y 
•t—Z? (t-y-t-i/Bm&o ) ZgmtZt. §{f$a 
SLTI!MJi¥©l 5tig-r (X7-y7l 0 6) o 

[00 8 4] igmEsas^ia i sti. * v-t-v b (c«m 

£nt^3 I a— +f£ N /SX7-Ffc, 12 
SEf— 7";!/ 1 6 (CftfrtiTVS IP7FUX16a, a 
-f«16b, /^X7-F1 6 c%JtlKLT-StLTV> 
&v^££58fSLfd£, KIEr-7;l/i 6£DIS^xyh 
'JtC^?nT^-5il*S5fe^-;l/7 FUX 1 6 dtC*X 
hf-7;H 4«D#t^!^S^^Lfc^ex.5^ 

^-y-tr-^BlclM^ftTV^x— *f££1fffii: LTA 
ft 3 c * -y -t - V B lc a- +f £ # Aft £ tiX & i^if-a- 

-^Bt ha ^ -y -t-^' b im 5>nr c fcif^te 
*coi££;t3tiPB*An£o ) ^ff^tTiiiifi^i? 
si zicmmzm^tz (x^-y^i 22) tttK, 

7^109). 

[0085] mimm&s. 121^ ^ 'y-tr-^c^i^ 

-;l/7 FbXSfcfCjMtBf £ (ccom^. *vb-i/C 

hCDjMfgTCCDP C 3 5T«5:<, ^lEOX- 
IfT'fcSPC 3 liCJSO Uf7710 8). 
[0 0 8 6] -75, <f«g¥l£ 1314, BIE&I#g 

-7;H 4<0K^x>hUffl**SS^*tfihU 
•y bZmmtZ (X7>y7l 2 3) . 
[0 0 8 7] ^•yfe-^C^ltBJofci/XxA 

[0 0 8 8] tt±iai)> ffiSEOi— tf O P C 3 5 *^ P 
C3 1 ©I P7KU*£»£U #-F2 5lC&mLT 
t>, PC 3 5fi^£PC3 l^LANX-f-y^l IKS 

[0089] aic, s i v$ffimt&m<D$mmic-D^ 

[0 0 9 0] ^lCDHSS^jT'JiLAN^-Y-y^l UCfc 

^x. mtmm^&i sit, ffluas^s 1 3frzm* 

£ftfc*Xh-r-7/M 4©x>H'JcOI P7FUX© 
P C a— if* i: / *x 7 - H © A* 5 * v -fe - 
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$ ttT l/> 5 a— If * £ ^X 7- K A^f 6 tt&fr o fc«# 
(-JEi*IBIrtK*SW3yigsnft3&»tjfc«*tdtr) & 

ffls^ai 3Kfi^-r§<fc9tUTt^ 0 jsuikj: 

0 , I P7K lxXHcolSS = X-*&*<0x--»f tfflSO P 
10 C07FU^*fil-3T2itt^*t)-r*LT5ie*(7fe^ 
i: 1 5 c tc <t 5 x— «f * i: /<* 7 - F co A^S^O^ 

[0 0 9 1] $fc, SlOHjSWPtiLAN^'f'yf-l 

ltfciAT, wmm^mi 5 a, ftttta^si 3*> 

SJI^Snfe^Xhf—^H 4fiDX>hUflDI P7F 
UX<DP Ctcx— «f*fc/^7-KOA**S#"r*y 

W«r5iM5Kl#S l 2C»jj*U ^KSEf— 7*;H 6 

estsnTi^a- !f*t^x7-F^e.n*A^o 

tr) ttx fi3I2*Xhr-7*;H 4 coxy h DcDffitgS^. 
*±*ffiEf ««yi?a 1 3K»»ILT^*^ ^e»tc 
*nEftlATR/^y hOte^il P7FUXt|lI-VL 
ANKJR-r^TOPC©3.— ytCx IP7KUX§OR 
SS^iatCa-lf^flfiJDP C©7 KU7S«r?T8 
tt^ft 0 f * L©jHB*f5*i 5 i: L T ^ 5 RT^tt^* 5 
C tZE&TZt'yt-i/ltttlS.LX, BuEfflfflJQS^ 
Si 2t*g^UT2iai*-e:Ttav\ W±tJ:t), I P 
7 F UXI?©^ ~ X^SScOx— !f jb<fl&© P C £07 F 

[0 0 9 2] $fc, SlOHfiSffJ-ptiLANX'Tyf-l 

coxy h u otsi^ja^* b, *»5as^ 

Si 3A^6»*»A G0r8ima*aty) TM(/^P«g^-& 
ts-yr^gttfcBttciSxyh'jcDI P7FUXOPCtcx 
-+f*i;/^X7-FcoA73^g*LT^5^ ^WWtc 
40 g-XVFUcOI P7 FU-XCOP ClCX— tf«t/U7- 

50*-Pi6«ffl*fTt>&i/^PCtOfTt., I P7F 
UXHCOIS^ = X% LTl^^A\ SftOa— »f ^flfi© 

p c cot f uxfcteoTjse-'pfc o -r s Lvmmzfi o 

[ 0 0 9 3 ]. $ fc, mi ©Hfi&fiflJTHi L A NX-f'yf 1 

i P7FUX{ciSS-r^*xhx-7;n 4coxyh'; 
50 Off*Bfl!«Wf»»*«A3WE4Ufc«^fc:, ZtHtmi* 
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»*.T£^jMKffi$aJi¥a 1 5 tcm^t>&zt£ireit 

{S*fT*>£^PCfcov>Tt, x lP7KUX«ORS5 
X£ LT^ftV\&\ SSccDx—tf tfffc© PCC7K bX 
^ffi-aTJSlli^ftO-rSLOafiSfT-aTl/^l/^f-x 10 

[0 0 9 4] £fc, $ 1 ©HMflTtt I P^T^y 

XV LAN, MAC7Kl/^-XVLAN v LayerST" 
D AN§<OfficD^iC«OVLANT»€>lRl 

[oo9 5] w±<D«t5tc, *«Wffl#nsiojBiBoa 

ft* v V 7 - * (0 Sfc itfLANX-f-y^-fCfctt 
If, B*©:i— If «fc 5 ®BB>& 5 "f $ Lfclft <* C t ft 
T*t, ilffi*-y h7-^->X-rA©-tr^aU7 : -i'^lRl± 20 

■f So 

[0 0 9 6] Sfc, a-lf^fiE{cTf# 5.nfca— ifS* 
a-TSd^fCctO, I P7KUX3S©iB£5Xte«fcSI» 

[0 0 9 7] ±teL7c^»jRcD|gH(CBeit$nfc^ 
[0 0 9 8] -ffcta^ 

<1> L ANX^'y^T'ffi/jlc-f 5ilf§*'y b7-7-> 30 
XfLOflSSTJoT, (a) ^PCttLANX-f 
vl-iz^tbl P7KUXfc*<Dx— 9**, /<X7-K> 
»«fep<-;l'7HU**»»U (b) LANX^7f 
©W1#«>IrI8*C LANX^ y^-t-pAWWt^-;I/7 
FUX«»U (c) LANX^-y^fiMfePCiSi 

tfiuK l a n x-r <y ^-©flfa#oifi«%aa-r sKE-r 

-TVl/^mSU (d) £e>fCL ANX-f-y^fi&PC 

AC7K UX. **£M AC7K UX, I P7K U-X 
£^SLT*Xhx-7;l/£fWtU C<E>i:£iiie*X 40 
hr-7;l/©cp»cMie^I P7KU^i:ISt5xy 
b V JSK SfJStfffiR-T b 'J fcBft* 

-DWVrv KOdS^I P7 Clcx— »f*i:/< 
:JW«£LfcB*e* 5 ^ v ■fe-s'fcfMJU 15* -y -tr 

h, mmwT-7i\><o*<Dims!&& i p7fux*ck 
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ffir— 7VI/KSSS ntv^a- tf * t ^x 7- Ftfff 

£«\ K£l P7FUx£*-£ityfB*xb7--7;l/£ 

Xhf— y/KDxyhiJ^JffJit^figLT, &3#-b 
(c/^>y b£dJftt-SC££#at-f3iIf§*>y b7- 

[0 0 9 9] <2> miK< 1 >82«<OSHI*'y b7- 
7^X7AO»l7?r£tc:fo^T, L A NX^ <y *-(4, * 

- h am ?> tift fro ^-s&ra fc #s $ n 

fcfrofciftefc:, sufEtfX bx-TVKDxv b y ££& 

iifS^-y b7-7i/X7 L A<7)Wg7?i£o 
[0100] < 3 > miie< 1 >IBilO!Hi* <y h 7- 
7i/XxA<Dgll73i£K33^T, L A N X-Y >y ^(4, ^ 
toHulB^ffiEr-^^Jcg^S nr i^S x— if * i: / ix 7 

tC^/^ <y b I P7 KUXtlB)— V LAN (CS-T 

^TflDPC©a— I P7KbX*©i&/£5X-fji 
jgOi— <f ^flfiO P C <Q7 K UX^ffio ratl!^* *0 1 

«y h7-^'>Xr^OSa^ffio 
[0101] < 4 > MIB< 1 >I2iK^®fi*-y h7- 
7S/Xf-A<9WIf?3?£lCfc^T, LAN^-yfti, * 

x hr-7;i/oxy h »mmfm*m*9i*.im3E.\, 
rctM^icm^-y h >j <r> \ ? t k ux<d p c tx-if« t 

Wlc^xy h 'J O I P7K UX<D P C tcx—tf* 

[0 10 2] < 5 > fiJE< 1 >8S*Oii«*'y h7- 
^^X-fAWta/jjifcfcl/^T, LANX-fyflJ, g 
ffl/^-y hO^I P7KUXtcK^1-?.^Xh7 L -7 

ISxyhUcDI P7KUX<DPCCa- 9**^^X7- 

ftjfi I p 7 K u-xtcK^-r hf-7;^x> h >; 

I P7KUX<DPCfCX— tf*t^X7-K<DA*«rS 
*U ft&jS 1 P7Kl/XfcP«{c»jSl P7KbXJCO 
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[0 10 3] <6> (a) ^tf-hicOiSTv^y F 

oai5Mi*ff 5 a«*i¥« k, (b) tuieffifisaa^ 

SfrfcttStlfc/^y F©&£MAC7Fl^X, &j&M 

7;l/*fft»U cottWSB*^ Fx-7/1/©*U:buIE 
&£l P7FUXKKMS*-SxyFytfM<fr&fcm8 10 

r*«^pRax> f y tHasflHRic*****^ 

tt, iu!B*XFx-7"/l'©xy hu^****^-*-* 

Itfc^tt, P7KU'X«r*-fCHuie*Xh7 L - 
7;l/*#JHU KSxvhy §£S#-F 

y h y j^M^jg^ti, nuiB*x F-f-TVwci^-rsx 

^by^rfiJStc^LT, t£^#- F^o^r-y F&7J 20 

* BijfEfflMMf Ktcji^-r * m *§&Ji#gi t , ( c > 

»^«n*k, P7FUX<OPC{c:x— tf 

T, HijfB/^^y F^gfitf-F^&aj^itufBafS&if 
xjgic^f 3 £ fcfc, a— «f«fc/<^7- K«4g* 
tiiO^oT, ftJIBKffi^— ^l/C*©WE I P7F 
UX»cK^1-*a»Jfe^-;l/7 FUXfcfufB^X hf- 30 
7;KDxy F y *t«*B##5g4 Lfc 5 ^ <y 

■te-5>*ma U -y •fe-S'OsfC P C *» 65g* ftfc 
a-+)-"S^1f ^k LTAtU 1MMSBfl&I¥gl£i£tH£ 
J§5*U «6k:^46iji2KliEf— r/l/taS^nTV^* 
a— ^i/U7- K*^6na*^rc«^-S«rlffl 

©xy f y o#t»*si±*mE , t>«ffla!^©Kai»] 

U ^#^IiE-f-7VWca&*nT^£a--- »f«fc/« 
7- F#»&nfc«*tt, MiE*7.hx-7VUQx;/ F 

[0104] <7> L ANX^-vxTlgfiJc-f Silff* 

•y bu-^-yxf-Lomm^^^x. (a) spc 

ti L A N X-Y >v ^{C^&M A C 7 F UX £ *©a— *f 
/U7-K, a*Sft*-;U7FbX£gflU 
(b) L ANX-T-y^Oga^tlsHitcL ANX-Y-y^ 

(c^toa*s^^-;i'7 F*ux*a»u (c) lanx 

>f y xfifluiB P C £ tfiifE LAN X-f *y f-<D Wg£> 
1*ffl*a»-r3KSEf— "7>I/*m»U (d) ^P>{CL 
ANX^-y^fi#PC^Oii^0^y*y h*3HIt« 50 
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k, 7 F OfeSM A C 7 K l/X^^S L t *X h 

BulSte^M A C 7 K ux »ck a -r * x > F U *^«t < «fi 

ic^rt-rsi^Msax^ f y £mzmmcwz 

m^Tv hOSffljK-FTfioK'^-y F© 
&,&M A C 7 F UX(D P C {C a— «f * i: ^X 7 - F £B 

f#oT, ffiK*X F-f-:7^©»t«*g#a<f84Lfc 
5 ^ >y -fe - v^fFfiS L , m * -y -fe - s*0* fc P 
C^6iS«nfca— «f**1»*tLTXn, HuifitgSEr 
-7;K7)fpcotuE^M A C 7 FUXtC^T SXfeft 
*-/l/7 FlxXtciMO, S6KiH6WI5BliEf— 

as* nr a— t ^x 7 - kjW# e tutfr ? 

Brt t J5*^Jg $ n&*> o fcJf-&(i , ftulB 
*X F r-7;l/cox > F y S t 5 k i: 1 1 
^/^•y F«r|ggL, ^46SGIBlIIIr-7;l/{caS?n 
Tt^a— >f«i:^X7- Ktf»5>nfc»&li, H^M 
A C 7 FUX**-{CfJIB*X Fr-7;l/^#^b, & 

K3x:/hyjWK^»att % Kai-**XFr-^ 
WxyF'J%»MLT, KSjU-ht/^v F 

[0105] w±*aw#fc«t"3T*snfci8w%iiw 

[0 10 6] 

[^(D5am] *«woa«*v f7-^>x^a<ds 
a^rak:«tnif, naw^s^Hi^aw*^^ F7-^ 

[0 10 7] *^©jifl^«y F7— >->XfA 

oea^SK <£ n« , s*©a— «f k i 5 y -r 

S L^K <- d k TiUS* >v F 7-^<D-tr*a y x-f 

[0108] *?zw<Dmm<PMmwic&mf, wmmh 

[0 10 9] *«HI3©18**»SWc.fcfttf, s> 
7 F 7-^ yXrAO-fr+a 'J 5r|S]±?^5 c i:*' 

[0ffiofS*;&iiiW] 

[0 1 ] *3Zm<D& 1 Oll««!8T?*SjifS*'y F7- 
[0 2 ] 1 OH«S»ffiT»S5il!HI*. -y F 7- 
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im 3 ] *%w<Dm i conmBm?3bzmm%>y h u- 

[0 4] *f§B3<DHS 1 cD^fi!imiTS§affi^7 h7- 
[0 5 ] #fgB£cD!g l ©llJ^TMlT&SjIfg*';/ f 7- 
[0 6] *^cD^l<D^)5{BfgSlTSSiifi^-y h7- 



(12) M2 000-1 7 4 7 9 6 

22 

* [0 7] *wn^ntmxh% i py-?*v h^-x 
v l a N<D~m*^-tm.-&mx$>z>o 

1 l-LANX^yf (1f$84«B) , 1 

S) , 1 4-*XFf-7;l/ (»JIr-7;W , 14a 
-Jfoftl PTKlxX, 1 4b-^MAC7Fl/X, 1 
4C-MMAC7KUX, 1 4 d-#-h##, 14 
e-»I*yh7-*> 1 5-KSE«l3¥K 
10 II), 16-ffiEf-7/K 1 6 a- I P7FUX, 1 
6b"a-fS, 16c-/U7-K, 16d-MHHte 
*-;l/7KbX, 2 1~25-^-h CAtti**- 
h) , 3 1 -3 4, 3 5-PC, A, B, C -vfe- 
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